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ELECTRONIC DEVICE FOR SECURE AUTHENTICATION OF OBJECTS 
SUCH AS COMPUTERS IN A DATA NETWORK 



4 RELATED APPLICATIONS 

5 The present application is a divisional of Steven M. Bliimenau and Yoav Raz, Ser. 
•* note* US paW- 4^3, 

6 No. 09/ 1 07,202Tiled June 29, 1 998, entitled "Electronic Device and Method for Secure 

7 Authentication of Objects Such as Computers in a Data Network," incorporated herein by 

8 reference. 
9 

Lil 10 BACKGROUND OF THE INVENTION 



" 11 

,s=s. 



„ , 12 Technical Field . 

=1 13 The present invention relates generally to secure authentication of objects, and 



14 more particularly to the use of an electronic circuit for the secure authentication of an 

15 object. 
16 

17 Description of the Related Art . 

18 In a data network, it is desirable to authenticate the identity of objects such as 

19 access cards or data terminals in order to prevent electronic theft of money, services, and 

20 information, and to prevent tampering with the configuration and operating 

21 characteristics of the network. Authentication of the identity of an object is sometimes 

22 the only means of electronically identifying the user of the object. For example, for 

23 billing purposes, a portable telephone may automatically transmit a user's authentication 
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1 code. Unfortunately, it is possible for a thief to intercept the user's authentication code, 

2 and create a "clone" of the user's portable phone. Calls made on the clone phone are then 

3 charged to the legitimate user's account. 

4 For critical applications, such as access to cash from an automatic teller machine, 

5 the user is often required to supply a password in addition to presenting an electronically 

6 readable object such as a credit or debit card containing an authentication code. The 

7 password offers some additional protection, but the password can often be intercepted 
]lz 8 when the user manually enters the password into a data terminal. Although user 

j;H 9 passwords can offer a high level of security if they are changed frequently, it is 

In 

\M 10 burdensome for a user to change frequently his or her password. What is desired is a 

1 1 mechanism that would ensure the unique identity of an electronic object used for 

\'Z 12 authentication. Therefore, the only burden that need be placed on the user is to be in 

! y 

ley 

□ 13 possession of the electronic object whenever the electronic object is used for 

ru 

14 authentication. 
15 

1 6 SUMMARY OF THE INVENTION 

17 In accordance with one aspect, the invention provides an electronic circuit chip 

18 including a memory for storing information defining an encryption procedure assigned to 

19 the electronic circuit chip; at least one input to the electronic circuit chip for writing, to 

20 the memory, the information defining the encryption procedure assigned to the electronic 

21 circuit chip, and for receiving data to be encrypted by the encryption procedure assigned 

22 to the electronic circuit chip; encryption circuitry for reading from the memory the 

23 information defining the encryption procedure assigned to the electronic circuit chip, and 
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1 for encrypting the data from said at least one input to the electronic circuit chip according 

2 to the encryption procedure assigned to the electronic circuit chip, to produce encrypted 

3 data; and at least one output from the electronic circuit chip for transmitting the encrypted 

4 data produced by the encryption circuitry. The electronic circuit chip is constructed so 

5 that the information defining the encryption procedure assigned to the electronic circuit 

6 chip cannot be read from the memory from any output of the electronic circuit chip. The 

7 electronic circuit chip is further constructed so that it is virtually impossible to recover 
^ 8 the information in the memory by probing, inspection, or disassembly. The electronic 
i=g 9 circuit chip includes a metal shielding layer over the memory so that the information 

in 

in 10 stored in the memory cannot be read by visual inspection or probing. 

^ 1 1 In accordance with another aspect, the invention provides an electronic circuit 

U 

|se£t 

m 12 chip including a memory for storing information; a microprocessor coupled to the 



lU 



□ 13 memory for reading information from the memory; at least one input to the electronic 

14 circuit chip for receiving information to be written to the memory, and for receiving data 

15 to be processed by the microprocessor; and at least one output from the electronic circuit 

16 chip for transmitting data processed by the microprocessor. The electronic circuit chip is 

17 constructed so that information can be stored in the memory but not read from any output 

18 of the electronic circuit chip, and the microprocessor is programmable for encrypting data 

19 in accordance with an encryption procedure defined by information that can be stored in 

20 the memory but not read from any output of the electronic circuit chip. The electronic 

21 circuit chip is constructed so that it is virtually impossible to recover the information in 

22 the memory by probing, inspection, or disassembly. The electronic circuit chip includes 

23 a metal shielding layer over the memory so that the information stored in the memory 
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1 cannot be read by visual inspection or probing. 
2 

3 BRIEF DESCRIPTION OF THE DRAWINGS 

4 

5 Other objects and advantages of the invention will become apparent upon reading 

6 the following detailed description with reference to the accompanying drawings wherein: 

1 ' 

Isva 

Q 

Q 8 FIG. 1 is a block diagram of a data processing system including a cached storage 

\m 

t!0 9 subsystem linked by a data network to a multiplicity of host processors; 

m 

1 1 FIG. 2 is a block diagram of the data processing system of FIG. 1 further showing 

fU 12 a typical fault-tolerant implementation for the data network; 
□ 13 

ru 

14 FIG. 3 is a generalized block diagram of a node linked to the data network of FIG. 

15 1; 
16 

17 FIG. 4 is a block diagram of the data processing system of FIG. 1 showing a port 

1 8 adapter in the cached storage subsystem using a volume access table for assignment of 

1 9 logical storage volumes to respective host controller ports; 
20 

21 FIG. 5 is a diagram showing a simplified construction that could be used for the 

22 volume access table introduced in FIG. 4; 
23 
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5 



1 FIG. 6 is a diagram of a volume list entry defining a vector of logical storage 

2 volumes in a disk spread; 

3 

4 FIG. 7 is a block diagram of the cached storage subsystem showing further data 

5 structures used with the volume access table stored in port adapter memory; 
6 

7 FIG. 8 is a diagram showing a preferred construction for a volume access table 

I.J. 

8 stored in the cache memory as introduced in FIG. 7; 



m 



ry 



9 

10 FIG. 9 is a diagram showing a preferred construction for the volume access table 

1 1 stored in port adapter memory; 
12 



Q 13 FIG. 10 is a diagram of a directory for searching the volume table of FIG. 9; 

ro 

14 

15 FIG. 1 1 is a flowchart of a microcode routine executed by a port adapter of the 

16 cached storage subsystem of FIG. 1 when using the volume access table of FIG. 5 or FIG. 

17 9 in response to a "Report LUNs" or access request by a host processor; 
18 

19 FIG. 12 is a flowchart of a microcode routine executed by a port adapter of the 

20 cached storage subsystem of FIG. 1 when converting the vector representation of FIG. 6 

21 to a list of logical storage volume numbers; 
22 

23 FIG. 13 is a flowchart of a microcode routine executed by a port adapter of the 
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1 cached storage subsystem of FIG. 1 when determining whether a specified logical storage 

2 volume is included in a disk spread defined by the vector representation of FIG. 6; 

3 

4 FIG. 14 is a graphical display of disk spreads in a two-dimensional volume space; 

5 

6 FIG. 15 is a graphical display of disk spreads in a three-dimensional volume 

7 space; 
8 

9 FIG. 16 is a flowchart of a microcode routine executed by a port adapter of the 

10 cached storage subsystem of FIG. 1 for volume configuration when installing the storage 



I 1 1 subsystem into the data processing system of FIG. 1 ; 

i>3 



''^ 12 



ly 

m 

\'n 13 FIG. 1 7 is a flowchart of a microcode routine executed by a port adapter of the 



14 cached storage subsystem of FIG. 1 when notified of a network state change such as a 

1 5 host controller boot; 
16 

17 FIG. 1 8 is a flowchart of a procedure performed by a system administrator during 

1 8 host controller replacement; 
19 

20 FIG. 19 is a diagram of a volume list that comprises a mapping table for mapping 

21 logical unit numbers (LUNs) to logical storage volume numbers; 
22 

23 FIG. 20 is a diagram of a volume list that comprises a mapping table for mapping 
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1 ranges of LUNs to vectors of logical storage volume numbers; 
2 

3 FIG. 21 is a schematic diagram of the data processing system of FIG. 1 showing 

4 one of the port adapters programmed to provide virtual ports for access to respective 

5 groups of logical storage volumes; 
6 

7 FIG. 22 is a schematic diagram of a data processing system in which port adapters 

I E 

□ 8 are programmed to permit a host to access the same virtual ports through the physical 

;L: 9 ports of more than one of the port adapters. 

m 

:H 1 1 FIG. 23 is block diagram of data structures of volume access and mapping 

o 

I** 12 information stored in memory of port adapters of the storage subsystem of FIG. 21 or 
13 FIG. 22; 

fu 

14 



15 FIG. 24 is a diagram of a virtual port host table included in the volume access and 

1 6 mapping information of FIG. 23 ; 
17 

18 FIG. 25 is a diagram of a virtual port mapping table included in the volume access 

1 9 and mapping information of FIG. 23 ; 
20 

21 FIG. 26 is a flow chart of a routine performed by a port adapter when reporting 

22 the virtual ports accessible to a host controller port; 

23 
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1 FIG. 27 is a first sheet of a flow chart of a routine performed by a port adapter 

2 when responding to a volume access request or "Report LUNs" request from a host; 
3 

4 FIG. 28 is a second sheet of the flow chart begun in FIG. 27; 

5 

6 FIG. 29 is a diagram of a display generated by a graphical user interface to show a 

7 mapping relationship between logical volumes, storage adapter ports, and LUNs at a 
a ' virtual port; 

'5 9 

m 

\f\ 10 FIG. 30 is a diagram of a display generated by a graphical user interface to 

1 1 establish a mapping between volumes accessible at a virtual port for a host and the LUNs 

|!y 12 at the virtual port; 

14 FIG. 3 1 is a block diagram of a semiconductor integrated circuit chip capable of 

15 authenticating itself in a secure fashion; 
16 

17 FIG. 32 is a block diagram showing semiconductor integrated circuit chips in 

18 accordance with FIG. 3 1 being used in the data processing system of FIG. 1 to permit a 

1 9 port adapter to authenticate the identity of host controllers; 
20 

21 FIG. 33 is a flowchart of a "challenge-response" procedure used by the port 

22 adapter and host controllers of FIG. 32 to permit the port adapter to authenticate the 

23 identity of a host controller; 

H: 468429(@ 1 FXOI I.DOC) O 



1 

2 FIG. 34 is a block diagram showing components of a Fibre Channel Frame; 

3 

4 FIG. 35 is a first sheet of a flowchart of a procedure used by the port adapter and 

5 host controllers of FIG. 32 to permit the port adapter to authenticate each message from a 

6 host controller; 
7 

\^ 8 FIG. 36 is a second sheet of the flowchart begun in FIG. 35; 

?esr 

m 

\M 10 FIG. 37 is a block diagram of a storage network configuration especially suited 

1 1 for up to 800 workstations; 



□ 13 FIG. 38 is a block diagram of a storage network configuration especially suited 

ry 

14 for up to 3300 workstations; 
15 

16 FIG. 39 is a block diagram of a storage area network providing fault tolerance and 

1 7 failover capability for hosts and storage subsystems in the network; and 
18 

19 FIG. 40 is a block diagram of a storage area network similar to that shown in FIG. 

20 39 but including additional network loops for higher throughput. 
21 

22 While the invention is susceptible to various modifications and altemative forms, 

23 specific embodiments thereof have been shown in the drawings and will be described in 
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1 detail. It should be understood, however, that it is not intended to limit the invention to 

2 the particular forms shown, but on the contrary, the intention is to cover all modifications, 

3 equivalents, and altematives falling within the scope of the invention as defined by the 

4 appended claims. 
5 

6 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

7 

0 8 With reference to FIG. 1 of the drawings, there is shown a cached storage 

|:2 9 subsystem 20 connected via a data network 21 to a plurality of hosts 22, 23, 24, 25. The 

ill 

1 f| 10 cached storage subsystem 20 includes storage volumes 26 and a storage controller 27 for 

i2 1 1 controlling access of the hosts to the storage volumes. The storage volumes are logical 

Q 

i"* 12 units of storage distributed over one more storage devices 28, 29, 30, and 3 1 . The storage 

ry 

m 

.!=: 13 devices are magnetic disk drives, optical disk drives, tape drives, solid-state memory 

ru 

14 devices, or other storage devices capable of providing nonvolatile data storage. Presently 

15 the preferred storage devices are magnetic disk drives each having a storage capacity of at 

16 least 46 gigabytes. ' 
17 

18 The storage controller 27 includes a dual port cache memory 32, a plurality of 

19 port adapters 35, 36, and a plurality of storage adapters 37, 38. The cache memory 32 is 

20 accessed via any one of two back-plane busses 33, 34. Each of the port adapters 35, 36 

21 link the data network 21 to each of the two back-plane busses 33, 34. Each of the storage 

22 adapters 37, 38 links a respective set of the storage devices 28, 29, 30, 3 1 to each of the 

23 two back-plane busses 33, 34. For example, the cached storage subsystem includes up to 
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1 eight storage adapters and up to eight port adapters, and each port adapter provides two 

2 independent data ports to the data network. 
3 

4 When a port adapter 35 or 36 receives a storage access request from one of the 

5 hosts 22, 23, 24, 25, the port adapter accesses a directory in the.cache memory 32 to 

6 determine whether or not the data to be accessed resides in the cache memory. If the data 

7 to be accessed resides in the cache memory, then the port adapter accesses the data in the 

^'3 8 cache memory. If the data to be accessed does not reside in the cache memory, then the 

O 

if? 

9 port adapter forwards a storage access request to the storage adapters 37, 38. One of the 

m 

\jl 10 storage adapters 37, 38 responds to the storage access request by performing a logical-to- 

1 1 physical translation to determine where the data to be accessed resides on the storage 

I'": 12 devices, and reads the data from the storage devices and writes the data to the cache 

lU 
i'O 

,^5 13 memory, for access by the port adapter. The storage adapters 37, 38 also perform a write- 

fy 

14 back operation to ensure that that data written to the cache memory 32 by the port 

15 adapters eventually becomes written to the storage volumes 26. 
16 

17 The cache memory 32 ensures that data frequently accessed by the hosts is likely 

18 to be found in cache in order to avoid the data access time of the storage devices and in 

19 order to minimize loading on the storage adapters and the port adapters. Consolidation of 

20 network storage into a large cached storage subsystem provides a benefit that cache 

21 resources are consolidated into one large cache, which is more efficient than a number of 

22 smaller caches having in total the same cache memory capacity. A large cache is more 

23 likely to contain the most recently accessed data than the combined cache memory of the 
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1 smaller caches. 
2 

3 The storage subsystem 20 is constructed for high data availability so that a single 

4 high-capacity storage subsystem is at least as fault-tolerant as a local collection of 

5 conventional network storage servers. Fault tolerance is ensured by dual, redundant 

6 components and busses in the path from any one of the port adapters 35, 36 to any one of 

7 the storage devices 28, 29, 30, and 31 . Mirroring or RAID (redundant array of 

8 inexpensive disks) techniques ensure that the storage adapters 37, 38 can recover data in 

i,fl 

9 the event of failure of any one of the storage devices. In a similar fashion, the data 

h 

in 10 network 21 can be made fault tolerant by ensuring that each of the hosts 22, 23, 24, 25 

1 1 has independent paths through the data network 21 to each of two of the port adapters 35, 

!!- - 12 36, as will be further described below with reference to FIG. 2. 

lU 

m 

n 13 

IS! 3 

!y 

14 In a preferred form of construction, the cache memory 32 is composed of dynamic 

15 RAM memory cards mounted in a card-cage or main-frame, and the port adapters and 

16 storage adapters are programmed micro-processor cards that are also mounted in the card- 

17 cage or main-frame. Each port adapter 35, 36 has one or more processors for handling 

18 the conmiunication protocol of the data network 21 and communicating with the cache 

19 memory busses 33, 34. Each storage adapter 37, 38 has one or more processors for 

20 handling the communication protocol of the storage devices and for communicating with 

21 the cache memory busses 33, 34. For example, the links between the storage adapters 37 

22 and the storage devices 28, 29, 30, and 3 1 are FWD (fast, wide, differential ) SCSI or 

23 Fibre Channel fiber-optic loops. The port adapters 35, 36 can be progranmied to 
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1 communicate with the network via any number of communication and/or network 

2 protocols, such as Bus and Tag CKD, ESCON, SCSI, Ethernet, FDDI, ATM, DS 1 , DS3, 

3 T3, TCP, UDP, NFS, SNMP, and Fibre Channel. Further details regarding the preferred 

4 construction and operation of the cached storage subsystem 20 are disclosed in Yanai et 

5 al., U.S. Patent 5,206,939, issued April 27, 1993; Yanai et al. U.S. Patent No. 5,335,352, 

6 issued Aug. 2, 1994; and Yanai et al. U.S. Patent 5,381,539, issued Jan. 10, 1995; all 

7 incorporated herein by reference. 

O o 

i.n 

fQ 9 Referring to FIG. 2, there is shown a fault-tolerant way of connecting a large 

m 

Lfl 10 number of hosts 22, 23, 24, 25 to the cached storage subsystem 20. In this example, the 

1 1 data network 21 includes a respective loop 41, 42, 43, 44 connected to each port of the 

|?y 12 port adapters 35, 36, and each host has at least two ports, each of which is connected to a 

1:0 

Q 13 respective loop connected to the port of a different one of the port adapters. Therefore, if 

14 there is a single failure of any one of the loops or a single failure of any one of the port 

15 adapters, there will still be an operational path from each host to the internal back-plane 

16 busses (33, 34 in FIG. 1) in the cached disk storage subsystem. The loops 41, 42, 43, 44, 

17 for example, operate in accordance with the Ethemet or Fibre Channel standards. Each 

18 loop could connect up to fifty hosts, for a total of 400 hosts connected via dual-redundant 

19 paths from eight port adapters. For workstation hosts where dual-redimdant paths would 

20 not be needed, only one port of each workstation could be connected to the network 2 1 , 

21 so that up to 800 workstations could be connected to the storage subsystem by connecting 

22 this single port of each workstation to only one of sixteen loops, as will be fiirther 

23 described below with reference to FIG. 37. 
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1 

2 It is possible to replace each of the loops 41-44 in FIG. 2 with a switch, or to use 

3 switches together with loops for connecting hosts to the storage subsystem, as will be 

4 further described below with reference to FIG. 38. In general, for a given number of 

5 ports, a loop will be less expensive that a switch, but a switch may provide more 

6 bandwidth that a loop. The additional bandwidth of a switch may be needed for ensuring 

7 concurrent host access to the storage subsystem or for supporting bandwddth-intensive 
;;i 8 applications such as interactive video applications. 




m 10 In general, the data network 21 of FIG. 1 could have various topologies and 

1 1 simultaneously use a number of different communication protocols. For example, the 

Q 

Ti 12 data network 3 1 could connect ports of various devices by dedicated port-to-port 

j U 

.tJS. 

P 13 connections (i.e., so-called point-to-point connections), loops, or svsdtches, or 

fu 

14 combinations of these connections. In addition to switches, the data network 21 could 

15 include other connectivity devices such as hubs, bridges and routers. The data network 

16 31 could include additional processors or computers for buffering or streaming data from 

17 the cached storage subsystem to hosts or to archival storage such as a tape library. For 

18 example, the use of a cached storage subsystem in connection with stream servers, a tape 

19 library, and an ATM svsdtch, for continuous-media isochronous data access, and on-line 

20 backup storage, is described in Vishlitzky et al., U.S. Patent 5,737,747 issued April 7, 

21 1998. 
22 

23 The data network 21 could also include one or more additional cached storage 
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1 subsystems, preferably at different geographical locations, to provide redundancy and 

2 protection from a catastrophic failure of the cached storage subsystem 20, as will be 

3 further described below with reference to FIGs. 39 and 40. The cached storage 

4 subsystems could be linked for automatic remote mirroring of data to provide recovery 

5 from a disaster, as described in Yanai et ah, U.S. Patent 5,544,347 issued Aug. 6, 1996, 

6 incorporated herein by reference, and in Yanai et al., U.S. Patent 5,742,792 issued April 

7 21, 1998 (Ser. No, 08/654,51 1 filed May 28, 1996), incorporated herein by reference. 
□ 8 

O 
in 

jig 9 Because the data network 21 could have various topologies, it is desirable to 

m 

\j\ 10 provide a facility for enabling any device in the network to determine the configuration of 

\''^ 

11 at least that portion of the network that is accessible to the device. With reference to FIG. 

5 g 

''T. 12 3, for example, there is shown a node 50 having a number of ports, including ports 51 and 

I y 

!:o 

Q 13 52, which may be cormected to the data network 21 . In this context, the node 50 can 

US g 

ly 

14 represent any device having ports which may be connected to the data network 21 . The 

15 node also has a number of entities 53, 54, 55, 56, which are accessible through one or 

16 more of the ports, and which are identified by logical unit numbers (LUNs), each of 

17 which is unique for any single node. For example, if the node 50 is a storage subsystem, 

18 each logical storage volume is assigned a unique LUN. As will be fiirther described 

19 below, it is also possible to establish a mapping between the LUNs as specified by or 

20 reported to a host and the logical volumes, so that one logical volume could be mapped to 

21 more than one LUN. Each port 51, 52 is constructed or programmed to respond to a 

22 "Report LUNs" command by returning a list of LUNs which are accessible from the port. 

23 In the fashion, a host can send "Report LUNs" commands to each port of each storage 
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Q 

m 



1 subsystem to which it is connected, to obtain a list of the logical volumes to which the 

2 host is connected. This is typically done by a host operating system at "boot" time. 
3 

4 The format for the Report LUNs command and the manner of its use by the host 

5 is determined by the protocol used by the network. For example, for a host connected to 

6 a storage node via a SCSI link, then the host addresses the storage volume by a 

7 Bus/Target/LUN triple,, and the host can send a SCSI "Report LUNs" command over the 



Q 8 bus to each target on the bus to obtain a list of LUNs accessible through each target. 



9 Such a Report LUNs command is subsumed in the Fibre Channel standards, which define 

m 



i: 

n 

H 12 developed by the American National Standards Institute (ANSI). 

m 



10 additional capabilities for permitting a host to determine the present configuration of a 

1 1 network to which the host is connected. The Fibre Channel standards are currently being 



13 

14 In a Fibre Channel network, each port has a 64-bit port identifier called a "World 

15 Wide Name" (WWN). To ensure that the WWN is unique, for example, it may include a 

16 unique identifier of the manufacturer of the device including the port (e.g., an 

1 7 Organizationally Unique Identifier as registered with the IEEE in New York, N. Y.), and 

18 the manufacturer's serial number of the device. A logical storage volume in a Fibre 

19 Channel storage subsystem therefore can be identified by the combination of the WWN 

20 of the storage subsystem and the LUN of the logical volume. 
21 

22 In a Fiber Channel network, the portion of the network connected to each port has 

23 one of four distinct topologies; namely, point-to-point, private loop, public loop, and 
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1 fabric. A point-to-point topology has one port connected directly to one other port. A 

2 loop is a single simplex media linking three or more nodes such that transmission can 

3 occur between a single pair of nodes on the media at any given time. A hub is a specific 

4 implementation of a loop in which a node can be inserted into or removed from the hub 

5 without breaking the loop. A private loop is a dedicated or closed loop. A public loop is 

6 a loop attached to a node of a fabric. A fabric is a topology that permits multiple 

7 simultaneous transmissions between pairs of nodes connected to it. The fabric routes or 

«3 8 switches data frames fi:om a source node to a destination node. A switch is an 

□ 

^ 9 implementation of the fabric topology. 
f] 10 

Ell In a Fiber Channel network, a node of a host directly connected to a loop can 

:3 

*!^. 12 determine all other nodes in the loop by polling. A response from a node on the loop can 

U 
'0 

^ 13 indicate whether or not the responding node is or is not a fabric port. When a node is . 

sss* 

14 identified, its associated LUNs can be requested by sending a Report LUNs request to the 

1 5 node. A node of a fabric port can be fiirther interrogated about the identity of other nodes 

16 of the fabric to which the node of the fabric port is directly connected through the fabric. 

17 For example, associated with the fabric is a "name server" that will respond with a list of 

18 nodes directly accessible through the fabric. The name server has a predefined address on 

19 the fabric. A node of the host can also probe the configuration of a point-to-point 

20 connection or loop connected to each node directly accessible through the fabric, by 

21 addressing a port of the fabric to route interrogation requests to other ports. 
22 

23 A request from one port to another on a loop or fabric must identify the 
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1 destination port so that only the destination port will respond to the request. A request 

2 from one port to another on a loop or fabric must also identify the source of the request so 

3 that a response can be directed back to the source. Although the WWNs of the source 

4 and destination ports could be used in each request to uniquely identify the source and 

5 destination ports, each WWN contains so many bits that an undue amoxmt of transmission 

6 bandwidth and data processing capability would be expended if the source and 

7 destination WWNs were used in each request. Therefore, it is desirable to assign a 
g temporary identifier to each port in the data network in such a fashion that the identifier is 
9 unique to the configuration of the network at any given time, but not necessarily unique 

I'n 10 to each port for all time. Therefore, such a temporary identifier can have fewer bits than a 



ru 



1 1 WWN yet uniquely identify a source or desired destination of a request transmitted 

12 through the network. 



13 



14 The Fiber Channel standards specify that data is transmitted over the Fiber 

15 Channel network in packets having a predefined format, and such a packet is called a 

16 "frame." Each frame includes a source address (S_ID) and a destination address (D_ID). 

17 The S_ID is a temporary identifier of the port which is the source of the frame, and the 

18 D_ID is a temporary identifier of the port which is the desired destination of the fi*ame. 

19 Further details regarding the format of the frame are described below with reference to 

20 FIG. 34. 
21 

22 The use of temporary rather than permanent identifiers for source and destination 

23 addresses in the network introduces the problem of assigning and reassigning the 
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1 temporary identifiers when the configuration of the network is defined and changed. For 

2 example, when a private loop is changed into a public loop by connecting a port of a 

3 switch to the loop, temporary addresses must be assigned to other ports of the switch and 

4 to the ports of devices that become connected to those other ports. 
5 

6 If a Fiber Channel network includes a fabric, then the temporary identifiers of 

7 ports in the network are assigned by the fabric at the time of a fabric login if the fabric 

3 8 supports a fabric login. Otherwise, the temporary identifiers must be known by the ports 

□ 

fl 9 implicitly. For example, in a fabric containing only one switch, when that one switch is 

:n 

f| 10 powered on or reset, then that one switch implicitly knows its own ports, and a "domain 

? 1 1 controller" of the switch searches for nodes connected to the switch ports, assigns 

P 

[f- 12 temporary IDs to all the nodes that become known to it, and reports to the ports that it has 

'il 

13 found the temporary IDs assigned to them. During this fabric login process, a "name 

y 

14 server" of the fabric may build a table of the WWNs of the ports that are known to the 

15 fabric and their corresponding temporary IDs. If the Fibre Channel network includes 

16 multiple switches, then only one of them, designated as the master switch, assigns ranges 

17 of temporary IDs to be used by each of the switches during the fabric login process. The 

18 Fibre Charmel network can be constructed so that the name server automatically obtains 

19 information from the domain controller when the domain controller learns about the ports 

20 that become connected to the network, or the Fibre Channel network can be constructed 

21 so that a port must log into the domain controller to obtain its temporary ID, and then log 

22 into the name server so that the name server obtains the temporary ID of the port. The 

23 first case is known as an implicit name server login, and the second case is known as an 
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1 explicit name server login. 

2 After an initial fabric login process, it is possible for the configuration of the 

3 network to become changed as a result of addition or replacement of devices having 

4 ports connected to the network. The data processing system could be shut down and then 

5 reconfigured so that the new ports become known implicitly, or a fabric login could be 

6 initiated so that temporary IDs become assigned to the new ports. In the case of a data 

7 network having a fabric supporting a fabric login, it is also possible for a device added to 

0 8 the network to initiate a process of obtaining temporary IDs for its ports by requesting a 

a 

in 

'^f^ 9 "port login" from the fabric. 

s 

m 10 

1 1 The Fiber Channel specifications provide a mechanism for the network to 

Q 

jl't 12 automatically detect certain changes of state which may indicate that the configuration of 

1 y 

r=i 13 the system has changed. For example, idle signals are transmitted over the links to enable 

fu 

14 detection of link failure. Frame transmission errors are detected by cyclic redundancy 

15 checks and sequence identification numbers in the frames. When transmission over a link 

16 is restored after detection of a link failure, a fabric may require the ports connected by the 

17 link to login for reassignment of temporary IDs to the ports. A fabric may also support a 

18 "state change notification" process in which ports having operational links to the fabric 

19 may request to be notified by the fabric when a state change is detected. 
20 

21 As described above, the data processing system in FIG. 1 has facilities for 

22 ensuring that the logical storage volumes 28, 29, 30, and 3 1 are accessible to the hosts 22, 

23 23, 24, 25. It is not only physically possible for any host to have access to any logical 
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1 volume in the data storage subsystem, but for fault tolerance is desirable for there to be at 

2 least two independent paths through the data network 21 and through the cached storage 

3 subsystem from each host to each logical storage volume. 
4 

5 Although it may be physically possible in the data processing system of FIG. 1 for 

6 any host to have access to any logical storage volume, it may be desirable to restrict the 

7 set of volumes that can be seen by any one host. Certain "private" volumes should be 

I- 

8 assigned to each host and other hosts should not be permitted to see or modify the private 
!«Q 9 volumes of other hosts. Moreover, the "boot" process for a host is slowed down by 

m 

\j\ 10 searching for and reporting all the volumes to which the host has access. Certain 

1 1 operating systems are limited by the number of devices that they can handle at a given 

□ 

12 period of time, and for a host using such an operating system, it is not only desirable but 

i:i 

p 13 also necessary to limit the number of volumes that the host can access. 

ru 

14 

15 The problem of restricting the set of volumes that can be seen by any one host is 

16 solved by a method of named groups and/or a method of virtual ports. The method of 

17 named groups is applicable to all Fiber Channel topologies for the connections of hosts to 

18 one or more ports of a storage controller. The method of virtual ports causes at least one 

19 port of the storage controller to appear as if it were a port of a fabric. The method of 

20 virtual ports could cause the port of the storage controller to appear as if it were a Fibre- 

21 Channel FL_Port (a port in a loop that is part of a fabric), E_Port (a port that is an 

22 interlink between two svsdtches), or F Port (fabric port). The two methods could be used 

23 at the same time in the same storage controller. In either the method of named groups or 
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1 the method of virtual ports, the limited set of volumes accessible to a host can be 

2 specified by a list of logical volumes in the limited set, or by a procedure that defines the 

3 limited set of volumes. An example of a specification for a procedure that defines the 

4 limited set of volumes is a vector defining what will be called a "disk spread." 



5 



6 Referring to FIG. 4, there are shown further details of the data processing system 

7 of FIG. 1. In FIG. 4, each of the hosts 22, 23, 24 and 25 is shown to have a respective 

8 host controller 61 , 62, 63, 64 for each host port 65, 66, 67, 68 directly linked to the port 

•scsS 
I r| 

i|Q 9 adapter 35. In the context of this specification, the term "host controller" refers to the 

m 

IM 10 controller of the host ports on the data network. In the data processing art, such a host 

'! 1 1 controller is often referred to as a "host bus adapter" or "HBA". The term "host 

12 controller" will be used instead to avoid confiision with the "port adapter" of the storage 

Q 13 controller or storage subsystem. Each host controller 61 , 62, 63, 64 is progranmied with 

14 a unique WWN for circuitry in the host controller for each of the respective ports 65, 66, 

15 67, 681. In other words, if a host controller is replaced with a different host controller, the 

16 WWN associated with the host port will change. Moreover, a host controller may 

17 provide more than one port, and the host controller is programmed with a different WWN 

1 8 for each of its ports. 



19 



20 As fiirther shown in FIG. 4, the port adapter 35 includes port circuitry 71 and 72 

21 for each of its two ports 73 and 74. The port circuitry, for example, includes application- 

22 specific integrated circuits (ASICs) for conmiunicating over the loops 41 and 43 in 
. 23 accordance with the Fibre Channel standards. The port circuitry is connected to an 



H: 468429(@1FX01!.DOC) 




1 input/output bus 75 of a microprocessor 76. The microprocessor 76 is comiected to a 

2 random access memory 77 by a memory bus 78. The microprocessor 76 is also 

3 interfaced to the storage controller busses 33 and 34. The memory 77 stores microcode 

4 79 executed by the microprocessor 76. 
5 

6 STORAGE VOLUME PARTITIONING BY NAMED GROUPS 

7 

i;3 8 In order to restrict the set of volumes that can be seen by any one host, the 

a 

9 memory 77 of the port adapter 35 stores information defining a correspondence between 

ifl 10 hosts in the data processing system and the set of volumes accessible to each host through 

Isss 

is 1 1 the port adapter. For example, a volume access table 80 and volume lists 81 are stored in 

.CSI. 

i"- 12 the memory 77. The volume access table specifies a correspondence between hosts and 

13 respective lists of volumes accessible to the hosts. A back-up copy of the volume access 

ru 

14 table and volume list could be stored in one of the storage volumes of the cached storage 

15 subsystem. 
16 

17 The information in the volume access table 80 and the volume lists 81 can be 

18 accessed by a system administrator viewing a display 91 and operating a keyboard 92 of a 

19 service processor 93 interfaced to the controller busses 33, 34. The display 91, keyboard 

20 92, and service processor 93, for example, are provided by a conventional lap-top 

21 computer mounted behind a door (not shown) in the cabinet (not shown) of the storage 

22 controller. The service processor 93, for example, is progranmied to provide a graphical 

23 user interface for volume configuration, partitioning, and other storage management 
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1 functions. The service processor also has a floppy-disc drive for down-loading of the 

2 microcode 79 from a from a floppy-disc program carrier 95. Altematively, a system 

3 administrator at a remote terminal or host could access the information in the volume 

4 access table 80 and volume lists 81 and down-load microcode via a modem or dedicated 

5 link or via the data network (21 in FIG. 1) using an appropriate communications protocol 

6 such as the Simple Network Management Protocol (SNMP). 
7 

O 8 Referring to FIG. 5, there is shown a simplified construction for a volume access 

J^g 9 table 82. A preferred form of construction for the volume access table 80 in FIG. 4 will 

i 

in 10 be described below with reference to FIGs. 7 to 1 0. In the simplified construction of FIG. 

11 5, each entry in the volume access table includes a volume group name, a host controller 

!»SS> 
t . 

12 port WWN, a host controller port S_ID, a private/shared flag, and a pointer to a volume 

i'Q 

Q 13 list. The volume group name includes a host name and a number identifying a particular 

14 one of possibly many host ports linked to the port adapter. The volume group name 

15 provides a stable and unique identification number for a group of logical storage volumes 

16 to be accessed from a host port. At any given time, the S_ID and host controller port 

17 WWN also provide unique identification numbers for the volume group, but the S__ID is 

18 changed upon booting of the host controller, and the WWN is changed upon controller 

19 replacement. Using a stable ID permits automation of booting, and simplifies 

20 management of controller replacement. Moreover, by providing a path through the data 

21 network from a host controller to each port adapter and by including an entry in the 

22 volume access table in each port adapter defining a volume group name for the host 

23 controller, it is possible to provide port independence in the sense that a host controller 

H: 468429(@ I FXOI 1.D0C) 25 




1 may access its corresponding set of logical volumes through any of the port adapters. 

2 When set, the private/shared flag indicates that all of the logical volumes in the volume 

3 list are private and no permission is needed from a lock manager before the host 

4 controller port can accessing any logical volume in its assigned volume list. 
5 

6 The volume group names and the volumes in each volume list are defined by the 

7 system administrator. The host controller port WWNs are entered into the volume access 

□ 8 table 80 automatically during installation or replacement of a host controller. The host 

□ 

|;p 9 controller S_ID is entered and updated automatically during each boot. The system 

I'l^j 10 administrator defines the host names, for example, by sequentially assigning numbers to 

is 11 the hosts. The host names are also known to the hosts, so that the relationship between 

12 each host and the volumes assigned to the host can be re-estaWished automatically if both 

ru 

;^ 13 the SJDs and WWNs would happen to change, for example as a resuh of host controller 

iu 

14 replacement and a change in the configuration of the data network. In this situation, the 

15 host controller port can transmit its corresponding group name to the storage subsystem 

16 during a login process or in response to a request from the storage subsystem in response 

17 to a state change notification so that the storage subsystem can reestablish the relationship 

18 of the host controller port's volume group name and volume list with respect to its new 

19 WWNandSJD. 
20 

21 In the table 82 of FIG. 5, for example, the entry "HOST22-I" indicates the first 

22 controller port of host no. 22, and it could be coded as a number 22 1 , although the entry 

23 could be displayed as "HOST22-r' for viewing by the system administrator. The other 
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1 entries in the table are shown as hexadecimal numbers. The volume access table itself 

2 can have any suitable organization in the port adapter memory 77, such as a fixed-size 

3 block of contiguous memory locations, or doubly-linked lists of the table entries. 
4 

5 The specification of the particular volumes in a volume group should permit 

6 flexibility in assigning a variable number of volumes to each group, and also permit 

7 flexibility in defining overlap between the groups corresponding to certain volumes that 
Q 8 are shared by the host processors. However, controller memory is a valuable resource, 

9 and it is necessary to rapidly determine whether or not a volume specified by a storage 

in 

\f\ 10 access request from a host controller port is included in the port's volume list. The 

1 1 searching of a long list of pseudo-random logical volume numbers, for example, would 

12 directly impact storage access time. Search time is especially critical in a cached storage 



is 



i'U 



rO 

13 system, since the search time may be comparable to the data access time if the requested 



14 data resides in the cache memory. In any case, the assignment of a long list of pseudo- 

15 random logical volume numbers complicates the storage management problem, because it 

16 is difficult for the storage administrator to comprehend how the volumes are assigned or 

17 shared when the volumes in the volume list become nearly full and additional volumes 

1 8 must be allocated to the hosts. 
19 

20 Hashing techniques can be used to search a long volume list rather efficiently, for 

21 example, by using the last couple of digits of the specified logical volume number as a 

22 hash table index. Since the list is changed infrequently, the list entries can be sorted for a 

23 binary search procedure. Moreover, it is possible to reduce the number of entries in the 
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1 volume list and speed up the search process by specifying a range or vector of volume 

2 numbers in each list entry. Shown in FIG. 6, for example, is a volume list entry 83 

3 specifying a beginning volume number 84, an ending volume number 85, and a value 86 

4 of one minus a stride (S). For example, the beginning volume number 84 is coded in 

5 three bytes, the ending volume number is coded as three bytes, and the stride is coded as 

6 tv^o bytes. The stride (S) indicates the difference between neighboring volume numbers 

7 of the volumes in a disk spread. The stride (S), for example, is a positive integer ranging 

8 from 1 to 256 decimal. 

Q 

m 9 

10 Referring to FIG. 7, there is shown a preferred form of construction in which the 

1 1 volume access table 80 in the memory 77 of the port adapter 35 stores only the volume 
U 12 access information need for processing of a data access request by a host controller, and 

i;u 

CO 13 an additional volume access table 88 in the cache memory 32 stores information that 

a 

' 14 appears in the table 82 of FIG. 5 but is not needed to process a data access request by a 

15 host controller. The table 80 in the port adapter memory 77 is further identified as a 

16 "transient" volume access table because it includes the transient S_IDs of the host 

17 controller ports that have logged in to the port adapter 35. The table 88 in the cache 

18 memory 32 is further identified as a "persistent" volume access table because it includes 

19 the relatively permanent WWNs of the host controller ports that have logged in to the 

20 port adapter 35. As further shown in FIG. 7, the port adapter 36 has a similar transient 

21 volume access table 87 in its port adapter memory 90. The transient volume access table 

22 87 includes the transient S_IDs of the host controller ports that have logged in to the port 

23 adapter 36. In this case, example, the persistent volume access table 88 includes the 
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1 WWNs of the host controller ports that have logged in to the port adapter 90 in addition 

2 to the WWNs of the host controller ports that have logged in to the port adapter 35. It is 

3 desirable to share a persistent volume access table among a number of transient volume 

4 access tables in the case where a host controller may access the same volume group from 

5 the ports of different port adapters, since this avoids duplication of persistent volume 

6 access table entries that would otherwise occur. Also shovm in FIG. 7 are volume 

7 attributes and locking information 89 stored in the cache memory 32, and respective table 
Q 8 directories 97, 98 that are stored in the port adapter memories 77, 90 and used to speed up 

a 

W 9 the process of searching the transient volume access tables 80 and 87. 



•5 1 1 The persistent volume access table 88 and the volume attributes and locking 

i^^ 12 information 89 also reside in a logical storage volume and be maintained in cache in a 

ru 

^1? 13 fashion similar to any other logical storage volume accessed by a host controller. 

rf c 

^ 14 However, it is preferred to locate the persistent volume access table 88 and the volume 

15 attributes and locking information in a reserved area of cache memory, called "shared 

16 memory," that is never deallocated, so that this information will always be found in the 

17 cache memory when a port adapter attempts to access it. 
18 

19 Referring to FIG. 8, there is shown a preferred construction for the persistent 

20 volume access table 88. The persistent volume access table 88 includes an entry for each 

21 distinct group of volumes to be accessible to a particular host controller from a particular 

22 port adapter. The persistent volume access table 88 has columns for volume group 

23 names, host controller WWNs, a private/shared flag, and pointers to volume lists, and 
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1 these columns are similar to the corresponding columns in the table 82 of FIG. 5. The 

2 persistent volume access table 88 further includes columns for a volume bitmap and a 

3 port adapter index list. A volume bitmap has a respective bit for each logical volume in 

4 the storage subsystem, and the respective bit is set if the logical volume associated with 

5 the bit is included in the volume list, and not set if the logical volume associated with the 

6 bit is excluded from the volume list. The port adapter index list includes the table index 

7 of each corresponding entry in a transient volume access table. Therefore, the port 

^3 8 adapter index list could include an index for each port adapter to which the host controller 

i.n 

9 is currently logged into. It may be desirable, but not necessary, for the hosts to log out of 



! e 



ry 

□ 
ru 



10 the port adapters. This would ensure that the volume access tables more precisely reflect 

1 1 the current state of the data network, and prevent any misdirection of messages if a 

12 network failure would prevent a storage adapter from being notified of a state change that 

13 would cause any S_ID in the transient volume access table to be reassigned. 
14 

15 In the persistent table 88 of FIG. 8, the information in each volimie bitmap is 

16 redundant with the information in each volume list. In this case, the volume list is the 

17 original form of the information as specified by the system administrator at configuration 

18 time. The volume bitmap is used for rapidly searching whether a specified volume is in 

19 the volume list, for example in response to a data access request from the host controller 

20 port to which the volume list is associated. The volume bitmap is generated 

21 automatically from the volume list when the volume list is entered or modified by the 

22 system administrator. The volume list is retained for viewing and revision by the system 

23 administrator. In a system with a limited number of logical volumes, the volume list 
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m 



ru 



1 could be quickly generated from the volume bitmask, and therefore there would be no 

2 need to retain the volume list it in memory or include the volume list in the volume 

3 access table. 
4 

5 Referring to FIG. 9, there is shovm a preferred format for the transient volume 

6 access table 80. The table 80 includes an entry for each host controller port currently 

7 logged into the port adapter. The table 80 includes columns for the host controller S_ID, 

8 the private/shared flag for the volume list, the volume bitmap, and a persistent table 

9 index. The persistent table index in each entry of the transient volume access table 80 

10 points to the entry in the persistent volume access table having the same private/shared 

1 1 flag and volume bitmap as the entry of the transient volume access table, and having a 

12 host controller WWN corresponding to the host controller S_ID in the entry of the 



13 transient volume access table. 

ru 

14 

15 Referring to FIG. 10, there is shown a preferred format for the table directory 93. 

16 The table directory includes, in each entry, a list of pairs of the S_ID and corresponding 

17 index to the transient volume access table for each SID having a certain modulus of the 

18 S JD. The modulus each S_ID in the table directory corresponds to the index of the 

19 directory table entry containing the S_ID. For example, the modulus of the S_ID is a 

20 certain number of least significant bits of the S_ID, and in this case the number of entries 

21 in the table directory 93 is two raised to the number of the least significant bits. 
22 

23 To search the transient volume access table 80 for an entry having a specified host 
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1 controller SJD, an index is computed by masking off the least significant bits of the 

2 specified S ID to obtain the corresponding modulus, and the modulus is used to index the 

3 table directory to find a list of S^IDs and corresponding indices that should include the 

4 specified S_ID if the specified S_ID is somewhere in the transient volume access table. 

5 The list in the entry indexed by the modulus is searched for the specified SID, and if it is 

6 found, then its corresponding index is the index to the transient volume access table entry 

7 containing the specified S_ID. If the specified SID is not found in the list in the entry 
i;? 8 indexed by the modulus, the specified S_ID does not appear in the S_ID column of the 

I =3 
hU 

fn 9 transient volume access table. 

m 

m 10 

1 1 Since S IDs are assigned to hosts controller ports sequentially when the host 

□ 

!iq 12 controller ports share a loop, the size of the table directory 93 can be determined based on 

f3 13 reasonable constraints on the network geometry. For example, if the most complex 

I'll 

14 network geometry connects a certain maximum number of loops to one or both of the two 

15 physical ports of the port adapter (for example, as described below with reference to FIG. 

16 38), then the number of entries in the table directory can be chosen to be greater or equal 

17 to the maximum number of host controller ports on a single loop, and the number of pairs 

18 of S_IDs and corresponding transient table indices in each entry of the table directory can 

19 be set to the maximum number of loops that can be connected to each port through one 

20 switch. However, the number of possible S_IDs in each entry of the table directory 97 

21 can be reduced still fiirther if one assumes a particular kind of connection between each 

22 loop and each port adapter port. For example, if a single switch is used to connect loops 

23 to the port adapter (for example, as shown in FIG. 38), and all of the host controller ports 
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1 are assigned S_IDs sequentially by this switch, then the number of entries in the table 

2 directory can be chosen to be the smallest power of two greater or equal to the maximum 

3 number of host controller ports linked to the port adapter ports, and there will be at most 

4 one S_ID and corresponding transient volume access table index in each entry of the table 

5 directory. 
6 

7 Referring to FIG. 1 1 , there is shown a flowchart of a microcode routine executed 

{;3 8 by the microprocessor (76 in FIG. 4) of the port adapter (35 in FIG. 4) in response to a 

□ 

l.M 9 "Report LUNs" or access request by a host. In a first step 101 , the microprocessor 

m. 

I'L 10 decodes the S_ID from the request. Then in step 102, the microprocessor searches the 

1 1 volume access table for an entry having the S_ID from the request. For example, this is 

n 

M 12 done by indexing the table directory of FIG. 1 0 with a modulus of the S_ID firom the 

ru 

^ 13 request, searching the indexed entry of the table directory for the S_ID from the request, 

' 14 and if the S_ID from the request is found in the entry, then indexing the volume access 

15 table of FIG. 9 with the corresponding index in the entry of the table directory. If the 

16 S_ID of the request is not found in the volume access table, then execution branches to 

17 step 104 to report no LUNs or deny the access request, and the routine is finished. 
18 

19 If the S_ID of the request is found in the volume access table, then execution 

20 continues to step 105. In step 105, the volume bitmap or volume list is accessed. For the 

21 volume access table format of FIG. 9 the volume bitmap is accessed, and for the volume 

22 access table format of FIG. 5, the volume list is accessed. In step 106, execution 

23 branches to step 107 for a "Report LUNs" request. In step 107, the port adapter reports to 
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1 the host controller a storage LUN for each volume in the volume bitmap or volume list, 

2 and the routine is finished. For an access request, execution continues from step 106 to 

3 step 108. In step 108, execution branches to step 109 if the volume to access is not in the 

4 volume bitmap or volume list. For a bitmap, this can be done simply by addressing the 

5 bit corresponding to the logical volume specified by the host controller. In general, the 

6 volume list is searched by using a technique most suitable for quickly searching the 

7 volume list. In step 109, the port adapter denies the storage controller access to the 
p 8 logical volume, and the routine is finished. 

m ^ 
IIP 

i n 10 If the volume to access is in the volume bitmap or list, then execution continues 

: s 

!5 1 1 from step 1 08 to step 110. In step 1 1 0, the private/shared flag is inspected for the 

ll* 12 indexed entry of the volume access table. If the private/shared flag is set, then execution 

i y 

J:^ 1 3 continues from step 1 1 0 to step 111. In step 1 1 1 , the port adapter accesses the logical 

m 

14 volume specified by the host controller, and the routine is finished. If the private/shared 

15 flag is not set, then execution branches fi-om step 1 10 to step 1 12 to access the locking 

16 information the cache memory. If the private/shared flag is set, then access is permitted, 

17 and execution branches fi"om step 1 13 to step 1 1 1 to access the volume. If the volume to 

18 access is public and is already locked in a fashion incompatible with the access requested 

19 by the host (e.g., the volume is already write locked and the host controller requests a 

20 read or a write access, or the volume is already read locked and the host controller 

21 requests a write access) then access not presently permitted. The host controller's S_ID 

22 is placed on a wait list, in order to notify the host controller when the logical volume 

23 becomes available; execution branches from step 1 1 3 to step 1 14 to temporarily deny 
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1 access to the volume, and the routine is finished. If the volume to access is public and is 

2 not locked or is locked in a fashion compatible with the requested access by the host 

3 controller (e.g., the volume is already read locked and the host controller requests a read 

4 access), then a lock is granted to the host controller, and execution branches from step 

5 1 13 to step 1 1 1 to access the volume, and the routine is finished. 
6 

7 Referring to FIG. 12, there is shown a flowchart 120 of a microcode routine 120 

□ 8 executed by the microprocessor (76 in FIG. 4) of the port adapter (35 in FIG. 4) when 

in 9 converting the vector representation of FIG. 6 to a list of logical storage volume 

1:9 

!'L! 10 identifiers. This routine is used, for example, in step 106 to report the storage LUNs in a 

Us 



1 1 disk spread defined by an entry in the volume list. In a first step 121, an index (I) is set to 

12 the first volume number (BEGIN) for the disk spread. Next, in step 122, the value of the 
;;2 13 index I is inserted onto the list. Then in step 123, the value of the index is compared to 

14 the last volume number (END) of the disk spread. If the value of the index is greater or 

15 equal to the value of the last volume number (END), then the routine terminates. 

16 Otherwise, execution continues from step 123 to step 124. In step 124, the index (I) is 

17 incremented by the stride (S), and execution loops back to step 122. 
18 

19 Referring to FIG. 13, there is shown a flowchart 130 of a microcode routine 

20 executed by the microprocessor (76 in FIG. 4) of the port adapter (35 in FIG. 4) when 

21 determining whether or not a specified logical storage volume is included in a disk spread 

22 defined by the vector representation of FIG. 6. This routine is used, for example, in step 

23 107 to determine whether or not the volume specified by a data access request is included 
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in 



1 in a disk spread defined by an entry of the volume list. In a first step 1 3 1 , the volume 

2 index (I) is compared to the first logical volume number (BEGIN) of the disk spread. 
3 

4 If the volume index (I) is less than the first logical volume number, the execution 

5 returns indicating that the specified logical storage volume is not included in the disk 

6 spread. Otherwise, execution continues from step 131 to step 132. In step 132, the 

7 volume index (I) is compared to the last logical volume number (END) of the disk spread. 

8 If the volume index (I) is greater than the last logical volume number, then execution 

9 returns indicating that the specified logical storage volume is not included in the disk 
in 10 spread. Otherwise, execution continues from step 132 to step 133. 

L 11 

py 12 In step 133, the stride (S) is compared to one. If the stride (S) is equal to one, 

p 13 then execution returns indicating that the specified logical storage volume is not included 

ru 

14 in the disk spread. Otherwise, execution continues to step 134. In step 134, the 

15 difference is calculated between the index I and the first logical volimie number (BEGIN) 

16 of the disk spread. Then a value REM is computed which is the modulus of the 

17 difference (DIP) and the stride (S). In particular, if the difference (DIP) is zero, then 

18 REM is zero. Otherwise, DIP is divided by S using an integer division procedure, and 

19 REM is the remainder of the division. If REM is zero, then execution returns indicating 

20 that the specified logical volume is in the disk spread; otherwise, execution returns 

21 indicating that the specified logical volume is not in the disk spread. 
22 

23 Referring to PIG. 14, there is shown a graphical display 140 of disk spreads in a 
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1 two-dimensional volume space. For example, the logical volumes 10 to 112 are arranged 

2 as a four-by-four square matrix. The rows of the matrix correspond to respective disk 

3 spreads defined by the respective vectors VO = (0, 3, 1), VI = (4, 7, 1), V2 = (8, 11, 1), 

4 and V3 = (12, 15, 1). For each of these row vectors VO to V3, the stride (S) is one. Also 

5 shown is a disk spread defined by a column vector V4 = (2, 14, 4) having a stride (S) of 

6 four. In a multi-processor system, for example, the disk spreads represented by each of 

7 the row vectors VO, VI, V2, V3 could be assigned to a respective one of four host 

□ 8 processors, and the disk spread represented by the column vector V4 could be assigned to 

Q 

i fi 

jig 9 a fifth host processor. In this case, none of the first four processors would share any of 

ijfi 

[f| 10 the volumes with any other of the first four processors, but each of the first four 

iE 1 1 processors would share one volume with the fifth processor. In this fashion, a limited 

a 

S"^ 12 amoxmt of information can be stored in the memory of a port adapter to define a rather 

:L 13 large number of volumes having various shared and private relationships among a 

ru 

14 multiplicity of host processors. 
15 

16 Referring to FIG. 1 5, there is shown a graphical display of disk spreads in a three- 

17 dimensional volume space. The volume space includes 4,096 volumes, or 16 volumes 

18 along each of the x, y, and z axes. Shown in this volume space is a first disk spread 

19 defined by a vector V5 = (0, 15, 1) having a stride (S) of one, a second disk spread 

20 defined by a vector (15, 255, 1 6) having a stride (S) of sixteen, and a third disk spread 

21 defined by a vector V7 = (255, 4095, 256). By using such a three-dimensional graphical 

22 display, it is possible to show complicated private and shared relationships between the 

23 volumes accessible to a large number of host computers. For example, the service 
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1 processor 93 in FIG 4 could provide such a three-dimensional view on the display. The 

2 volumes associated with a particular group name could be displayed in a corresponding 

3 primary color, so that the private and sharing relationships for up to three selected group 

4 names or host controller ports could be displayed simultaneously. For example, in FIG. 

5 1 5, the disk spread specified by the vector V5 could be associated with a first host 

6 processor and displayed in red, the disk spread specified by the vector V6 could be 

7 associated with a second host processor and displayed in blue, and the disk spread 

.li 8 specified by the vector V7 could be associated with a third host processor and displayed 

•sel 

i;g 9 in green. Therefore the shared volume 115 would be displayed in magenta, and the shared 

Ln 10 volume 1255 would be displayed in cyan. Moreover, the service processor could be 

1 1 programmed to display a colored two-dimensional 16x16 square matrix of the logical 

i:y 12 volumes for any selected one of 1 6 planes parallel to the x, y, or z axes in the logical 

m 

i;j 13 volume space. In addition to indicating the private and shared relationships of the 

1=1 5 
i 

14 volumes to the hosts, the two-dimensional displays could provide additional information 

15 in the display region of each volume, such as a numeral or graph indicating of the free 

16 storage space in each volume. 
17 

18 Referring to FIG. 16, there is shown a flowchart 160 of a microcode routine 

19 executed by the microprocessor (76 in FIG. 4) of the port adapter (35 in FIG. 4) for 

20 volume configuration when installing the storage subsystem into the data processing 

21 system of FIG. 1. In a first step 160, the system administrator enters a group name for a 

22 host to be permitted access through one or more port adapters. For example, the system 

23 administrator manually operates the keyboard 92 in Fig. 4 to enter the host name, host 
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1 controller number(s), and port adapter number(s). The service processor 93 forwards this 

2 information to the port adapter(s) and the microprocessor(s) in the port adapter(s) 

3 allocate(s) a table entry for each host controller number and places the respective group 

4 name into each table entry. Then in step 162, the port adapter(s) automatically search the 

5 network for the S_ID and WWN of the host controller ports corresponding to the group 

6 names. For example, the port adapters poll the ports of the hosts, and the host controllers 

7 are programmed to respond to port adapters by retuming their host names and controller 

^'3 8 numbers. If the polling is successful in retuming the S JD and WWN associated with the 

U 

9 group name, as tested in step 163, then execution continues to step 164. In step 164 the 

5 

i^ri 10 system administrator enters a volume list for the group name, for example by entering 



IS 

a 

ru 
m 

Q 



1 1 logical volume numbers, ranges of logical volume numbers, or vector specifications 

12 (beginning number, ending number, stride) at the keyboard 92 in FIG. 4. In step 165, the 

13 microprocessor creates a table entry for the group name and its associated S_ID, WWN, 

14 and a pointer to the volume list. In step 166, execution continues to step 167 if the 

15 system administrator has no more group names to enter; otherwise, execution loop back 

16 to step 161. In step 167, the volume access table and volume lists are copied to a storage 

17 volume as back-up for port adapter error recovery or diagnostic purposes, and the routine 

18 if finished. The back-up copy should be updated if additional group names are added to 

19 the volume access table or if the volume lists are changed 
20 

21 If the polling is not successful in retuming a S_ID and WWN for a host or group 

22 name, then execution branches from step 163 to step 168. In step 168, the items not 

23 found are reported to the system administrator, who has the option of creating or not 
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1 creating a table entry if the items cannot be found. For example, it is possible for the 

2 system administrator to permit a table entry to be created for host controllers that are not 

3 presently logged into the data network, and the port adapter can fill in the missing items 

4 automatically if and when the host controller are booted. If the system administrator has 

5 selected the option of not creating a table when items are missing, then execution 

6 branches from step 169 to step 166. Otherwise, execution continues from step 169 to step 

7 1 70. In step 1 70, the S JD and WWN for the group name is set to null, and then 

0 8 execution continues to step 164. 

Q 

■'.ft Q 

m 

1 H 10 Referring to FIG. 1 7, there is shown a flowchart 1 80 of a microcode routine 



ru 



1 1 executed by the microprocessor (76 in FIG. 4) of the port adapter (35 in FIG. 4) when 

12 notified of a network state change such as a host controller boot. In a first step 1 8 1 , the 

13 port adapter obtains the WWN, the S_ID, and the group name of the host controller port. 

14 Then in step 182, the volume access table is indexed with the group name. If no entry for 

15 the group name is found in the table, then the routine is finished. Otherwise, execution 

16 continues to step 183. In step 183, the WWN obtained firom the host controller port is 

17 compared to the WWN in the table entry. If the WWN obtained firom the host controller 

1 8 port is the same as the WWN in the table entry, then execution continues fi-om step 1 83 to 

19 step 184. In step 184, the S_ID value in the table entry is reset to the value obtained by 

20 the port adapter in step 181, and the routine is finished. 
21 

22 If in step 1 83 the WWN obtained fi*om the host controller port is different fi*om 

23 the WWN in the table entry, then execution branches from step 1 83 to step 1 86. In step 
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1 1 86, execution branches to step 1 88 if the WWN in the table entry is null. The null value 



2 in the table indicates that the system administrator has authorized the WWN to be set 



3 during a controller boot, for example just after an authorized installation or change of a 



4 host controller circuit board. Therefore, in step 188 the WWN and S ID obtained in step 



5 1 8 1 are entered into the entry of the volume access table, and the routine is finished. In 



6 step 186, if the WWN entry is not null, then an unauthorized change in a host controller 

7 circuit board has occurred, and execution branches from step 1 86 to step 1 87 to report the 

O 8 error to the system administrator, and then the routine is finished. 

Q 

1'^ 10 Referring to FIG. 1 8, there is shown is a flowchart of the procedure that should be 



12 1 1 performed by a system administrator during host controller replacement. In step 201 the 

12 host is interrupted to suspend any communication over the data network or shut down to 

ru 

';5 13 permit replacement of the host controller. Unless the host controller board has a "hot 

14 swap" capability, the host will be shut down to shut off power to the controller board 



15 before it is removed and replaced. Then in step 202, the system administrator nullifies 



16 the host controller's WWN in all such WWN entries in all volume access tables in all port 



17 adapters of the storage subsystem, and in step 203 the host controller is replaced. The 



18 replacement of the host controller board causes the WWNs of the ports of the host 



19 controller board to change. In step 204, host processing is restarted or continued, 



20 including a boot of the new host controller board, and the procedure is finished. 



21 



22 MAPPING OF LUNs TO LOGICAL VOLUME NUMBERS 



23 



H: 468429(@ 1 FXO I I.DOC) 




□ 



ru 



ry 



1 As described above with reference to FIG. 7, a host may request access to a 

2 specified logical volume in the storage subsystem. If a host may access only a very 

3 limited set of the logical volumes in the data storage subsystem, however, it may be 

4 desirable for the port adapter to report back to each host a limited range of LUNs 

5 representing logical volumes that the host can access, and for the port adapter to map this 

6 limited range of LUNs to the limited set of logical volumes that each host can access. 

7 The host therefore does not need to deal with a large number of possible volumes, and 

8 minimal modification of the host programming is needed when a host is networked to the 

9 data storage subsystem. Instead of specifying a logical volume number when requesting 

10 access to a logical storage volimie, the host specifies a LUN, and the port adapter 

1 1 receiving the storage access request translates the specified LUN to a corresponding 

12 logical volume number. There can be a different mapping of LUNs to logical volume 



m 1 3 numbers for each host or host controller port. 

'sss? 



14 

15 As shown in FIG. 19, the mapping of LUNs to logical volume numbers for a 

16 volume group name is specified by the entries in the volume list 210 associated with the 

17 volume group name. Each entry in the volume list 210 includes a LUN in the volume 

18 group and its corresponding logical volume number (VOL_NO.). The first entry 211 in 

19 the volume list, for example, maps LUN 1 to logical volume number 8. 
20 

21 In practice, it is desirable to assign ranges of contiguous LUNs to the volume 

22 groups or hosts. These ranges of contiguous LUNs, for example, are evident when the 

23 LUNs in the volume list are sorted by LUN, for example as shown in FIG. 19. In many 
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1 cases, each range of contiguous LUNs corresponds to a range or vector of logical volume 

2 numbers. Therefore, in a data processing system having a large number of LUNs per host 

3 and an even larger number of logical volumes, it may be desirable to specify the LUN to 

4 logical mapping as a number of ranges of contiguous LUNs and corresponding vectors of 

5 logical storage volume numbers. 
6 

7 As shown in FIG. 20, for example, each entry in the volume list 220 associates a 

Q 8 respective range of contiguous LUNs with a vector of logical volume numbers. Each 

G 

9 entry includes the first LUN in the range, the number (N) of LUNs in the range, the 

CO 

i'gg 10 beginning logical volume number in the associated vector of logical volume numbers, 

sH 11 and the stride (S) of the vector. The first entry 221 in the volume list 220, for example, 

M 12 specifies a first LUN of one, a number (N) of three, a beginning logical volume number 

13 of eight, and a stride (S) of two. This maps the sequence of contiguous LUNs (1, 2, 3) to 

I'll 

""14 the sequence of logical volume numbers (8, 10, 12), and therefore the first entry 221 in 

15 the volume list 220 of FIG. 6 encodes the same information as the first three entries in the 

16 volume list 210 of FIG. 19. 
17 

1 g To find whether a specified LUN is within the map of any entry in the volume list 

19 220, the specified LUN value is compared to the LUN value in the entry, and if it is less 

20 than the LUN value in the entry, the specified LUN is not within the map of the entry. If 

21 the specified LUN value is greater or equal to the LUN value of the entry, then the 

22 specified LUN value is compared to the LUN value in the entry plus the value of N in the 

23 entry. If the specified LUN value is less than the LUN value in the entry plus the value of 
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1 N in the entry, then the specified LUN is within the map of the entry; otherwise, it is not. 

2 If the specified LUN is within the map of the entry, then its corresponding logical storage 

3 volume number is computed as: 
4 

5 LOGICAL_VOLUME_NO.= MAP_VOL_NO.+ ( SPEC_LUN-MAP_LUN) * S 

6 

7 where MAP_VOL_NO. is the VOL_NO in the map entry, SPEC_LUN is the 



;;i 8 specified LUN value, and MAP LUN is the LUN value in the map entry. 

m 
m 

m 10 

1 1 VOLUME PARTITIONING BY VIRTUAL PORTS 

Q 

^ 12 

iy 

g 13 As described above with reference to FIG. 7, the port adapters can be programmed 

fu 

14 to provide a "Report LUNs" command that will report to each host only the LUNs or 

15 logical storage volumes assigned to the host. In other words, a host would not normally 

16 have the capability of seeing the LUNs or logical volumes assigned to another host. This 

17 offers some security, but it is incompatible with the conventional "Report LUNs" 

18 command of the Fibre Channel standards. In a Fibre Channel network, if a conventional 

19 "Report LUNs" command is used to discover LUNs, all ports will report back all of their 

20 LUNs. 
21 

22 The method of FIG. 7 also has the disadvantage that a significant amount of port 

23 adapter processing time is spent in managing variable-length volume lists or very long 
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1 bitmaps. The method of FIG. 7 further has the disadvantage that the entire group of 

2 volumes for a host controller must be flagged as shared if only one of the volumes in the 

3 group are shared, which increases the access time of the private volumes in the group. It 

4 would be desirable to use a predefined, fixed-length format for the lists that are fi'equently 

5 accessed if this would not waste port adapter memory or unduly limit the set of logical 

6 volumes that could be assigned to each host. For a host controller having both shared and 

7 private volumes, it would be desirable to associate more than one group of volumes to the 

8 host controller, including one or more groups of all private volumes and one or more 



11 



ru 



groups of all public volumes, so that each group can be separately flagged as private or 



in 10 public. 



12 The method of virtual ports overcomes these disadvantages in a way that is 



l=-5 13 compatible with the Fibre Channel specifications. In accordance with the method of 

14 virtual ports, the storage subsystem presents to the Fibre Channel network a set of 

15 "virtual" Fibre Channel ports that do not really exist on the network. A set of logical 

16 volumes is assigned to each of the virtual ports. The logical volumes within each set are 

17 accessible fi-om the virtual port through at least one physical port of the storage 

18 subsystem. This physical port is therefore a fabric port and the storage subsystem 

19 provides a virtual switch from the physical port to each of the virtual ports accessible 

20 through the physical port. In particular, the physical port is a Fibre Channel FL Port if it 

21 is in a loop of the Fibre Channel network, or it is a Fibre Channel E_Port if it is 

22 connected to a switch, or otherwise it is a Fibre Channel F_P6rt. The port adapter 

23 providing the physical port is programmed to function as an FL_Port, E_Port or F_Port 
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1 by responding to host login commands and assigning S_IDs; by responding to 

2 conventional Fibre Channel Report LUNs commands for reporting LUNs assigned to the 

3 virtual ports; and by responding to routing instructions from a host for routing data access 

4 requests to a specified virtual port and a specified LUN of the virtual port. 
5 

6 When using the method of virtual ports for volume partitioning, one or more 

7 virtual ports are assigned by the system administrator to each of the hosts having access 

P g to one or more of the virtual ports. Preferably logical storage volumes can be accessed 

in 

9 through a single virtual port by no more than one assigned host. This simplifies the 

m 

\n 10 access control or filtering function of the storage subsystem, and does not unduly restrict 

1 1 the sets of logical volumes that can be accessed since a sufficiently large number of 

Q 

j!" 12 virtual ports can be created. A fixed-length format can be used for storing the lists of 

\u 
iQ 

h 13 hosts, virtual ports, and LUN to logical storage volume mapping information for each 

5 

14 virtual port because a variable number of virtual ports can be assigned to each host. If a 

15 host needs more logical storage volumes than can be included in the volume list for a 

16 single virtual port, another virtual port can be created and assigned to the host. Moreover, 

17 each virtual port can be accessible through any desired number of the storage subsystem 

18 adapter ports defined as FL_Ports, E_Ports, or F_Ports. The virtual port is made 

1 9 accessible by storing in the memory of the port adapter the access and mapping 

20 information for the virtual port. 
21 

22 A host uses conventional Fibre Chaimel commands and protocols for sending 

23 requests to its assigned virtual port or ports. Since the Fibre Chaimel standards do not 
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1 restrict the ability of a host to send requests to all of the ports linked by the Fibre Channel 

2 network, there must be a mechanism for the system administrator's assignment of the 

3 virtual ports to the hosts to be communicated to the hosts, and the hosts must use this 

4 . information to direct their storage access requests to the virtual ports to which they are 

5 assigned. This assigrmient information must also be used by the host if the host has an 

6 operating system that permits the host to boot from a logical volume in storage linked by 

7 the Fibre Channel network to the host, or that permits the operating system of the host to 
:^ 8 collect information about the logical storage volumes that it can access. In other words, 

9 the operating system routine that searches for the storage volumes that are accessible to 

10 the host must send Report LUNs commands to only the virtual ports assigned to the host 

1 1 and not to the virtual ports assigned to other hosts. 



□ 



12 



Q 13 With reference to FIG. 21, the port adapter 36 of the cached storage subsystem 20 

i 

14 is shown having been progranmied to provide virtual ports for access to respective groups 

15 of logical storage volumes. The port adapter 36 has two physical ports 231 and 232 

16 provided by port circuitry 233 and 234, respectively. The port circuitry performs 

17 serializing, framing, sequencing, flow control, and coordination of protocols and services 

1 8 in accordance with the Fibre Channel standards. The port adapter 36 further includes a 

19 microprocessor 235 and a random access memory 236. The microprocessor 235 executes 

20 microcode 237 in the random access memory 236. In particular, the microprocessor 235 

21 is instructed by the microcode 236 to handle Fibre Channel requests received by the port 

22 circuitry 233 in such a way that there appears to be a respective switch 238, 239 in the 

23 storage controller 27 cormecting each of the ports 123, 13 1 to a respective set of ports 
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1 240, 241 between the ports 123, 131 and the storage volumes (28, 29, 30, and 31) in the 

2 cached storage subsystem 20. Since the ports 240, 241 do not appear as physical nodes 

3 anywhere in the cached storage subsystem 20, the ports 240, 341 are called virtual ports, 

4 and the switches 238 and 239 are called virtual switches. 
5 

6 As far as the data network 21 is concerned, the virtual ports 240 and 241 function 

7 in a fashion similar to physical ports in the data network. The virtual ports are assigned 

j-.A 

i=5 8 respective port names, WWNs, and S_IDs, and requests from other nodes in the network 

'sss? 
1:0 

i;o 9 are routed to them through their respective virtual switches 238, 239. For example, the 

m 

'«n 10 virtual ports respond to Report LUN requests in a fashion similar to physical ports. In 

!U 1 1 order to define the structure of the virtual switches, the random access memory 236 is 

s 

|1| 12 programmed with sv^dtch definitions 242 and also stores switch state information 243. 

i;3 13 The switch definitions 242, for example, include the respective WWNs of the virtual 

ry 

14 switches 238 and 239, and the swdtch state 243 includes the S_IDs assigned at any given 

15 time to the virtual ports 240 and 241 . The microcode 237 is also programmed to provide 

16 respective name servers 244 and 245 which provide nodes linked to the respective ports 

17 23 1 and 232 with limited access to the svsritch definitions 242 and switch state 243. In 

18 particular, the name servers can provide the respective names, WWNs, and S_IDs of all 

19 the virtual and physical ports of the virtual switches. 
20 

21 The random access memory 236 is further programmed with volume access and 

22 mapping information 246. The volimie access information indicates a respective set of 

23 storage LUNs that any host can access by requests addressed to the virtual ports 240, 241 . 
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1 The volume mapping information indicates respective logical volumes mapped to the 

2 virtual ports 240, 241 . The volume access and mapping information for each of the 

3 virtual switches 238, 239 could be the same or it could be different. For example, it 

4 could be the same to permit any host to be disconnected from any one of the network 

5 loops 42, 44 and cormected to the other loop without any change in the storage access 

6 privileges or procedures of the host. The set of logical storage volumes mapped to 

7 different virtual ports can be the same or different. For example, the set of logical storage 

O 8 volumes mapped to two virtual ports can be the same to permit two hosts to share the set 

!□ 

I;?! 9 of logical storage volumes mapped to the two virtual ports. 




1 1 With reference to FIG. 22, there is shown a data processing system having a 

O 

12 cached storage subsystem 250 and four host computers 25 1 , 252, 253, 254 linked to the 

ru 

- 13 cached storage subsystem by a data network 255. In this example, the hosts are linked by 

Q 
>'i • 

' 14 four loops 256, 257, 258, 259 to respective network port adapters 260 and 261 of the 

15 cached data storage subsystem. Each port adapter has two physical ports designated as 

16 "A" or "B". The physical port 262 of the port adapter 260 is an "A" port linked to the 

17 loop 256, the physical port 263 of port adapter 260 is a B port linked to the loop 257, the 

18 physical port 264 of port adapter 261 is an "A" port linked to the loop 258, and the 

19 physical port 265 of port adapter 261 is a "B" port linked to the loop 259. The port 

20 adapters 260, 261 are progranuned to provide respective virtual switches 266, 267 linking 

21 their "A" and "B" physical ports to a set of virtual ports 268, including a respective 

22 virtual port VP 1 , VP2, VP3, VP4 assigned to each of the hosts 251, 252, 253, 254. Each 

23 of the port adapters 260 and 261 is programmed with respective volume access 
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1 information 269, 270 which can be identical to permit any of the hosts 25 1 , 252, 253, 254 

2 to be disconnected from any one of the loops 1 56, 1 57, 1 58, 1 58 and reconnected to any 

3 other of the loops without any change in the storage access privileges or procedures of the 

4 host. 
5 

6 With reference to FIG. 23, there is shown an example of the volume access and 

7 mapping information 269 of FIG. 18. The volume access and mapping information 246 

8 of FIG. 21 can have a similar format. The volume access and mapping information 269 

9 includes a virtual port host table 28 1 listing each host having access rights through a 

i 

i;fi 10 virtual switch controlled with the volume access and mapping information, and a virtual 

in 

i"^ 1 1 port mapping table 282 listing each virtual port accessible through the virtual switch 

it 

12 controlled with the volume access and mapping information. Separate tables are used 

ijg 13 because each host listed in the host table can have more than one assigned virtual port. 

rU 14 Also included in the volume access and mapping information 269 are optional lists 283 of 

15 indices to the virtual port identifiers in the virtual port mapping table 282 assigned to 

16 each host in the virtual port host table 281 . The lists 283 are optional because the 

17 information in the lists could be obtained by scanning through an entire column of host 

18 indices in the virtual port mapping table. The lists 283 are not needed for handling a 

19 storage access request by a host. The lists 283 are used for quickly responding to a host 

20 when the host requests a report of the virtual ports from which it can access logical 

21 storage volumes. It is desirable to compile the lists by scanning the host index column of 

22 the virtual port mapping table and store the lists if a large number of hosts v^U be 

23 requesting the information frequently, for example, if the hosts login to the network 
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1 frequently and request the information during each network login. The lists 283 in total 

2 have a limited memory requirement because each virtual port in the virtual port mapping 

3 table can have only one assigned host, so that in total the lists 283 include no more than 

4 one occurrence of a virtual port index for each of the virtual ports listed in the virtual port 

5 mapping table. 
6 

7 Referring to FIG. 24, there is shown a format for the virtual port host table 281 . 

P 8 The table 282 includes a unique row for each host controller port from which a host can 

!□ 

;L; 9 access a virtual port defined in the virtual port mapping table (282 of FIG. 23). The table 

'{^ 10 281 includes a column for the HOSTJD of the host controller port, a flag PORT A/B 

f6 1 1 indicating whether the host controller port is linked to the physical "A" or "B" port of the 

1:3 

1'=^ 12 port adapter programmed with the table 28 1 , the WWN of the host controller port, the 

ru 

|;| 13 S_ID of the host controller port, a V_PORT INDEX which is a first index to a row of 

ru 

14 information in the virtual port mapping table (282 in FIG. 23) to which the host controller 

15 port has access through the port adapter, and a V_PORT LIST POINTER which is zero if 

16 there is only one V^PORT associated with the host controller port and otherwise points to 

17 a list of additional virtual port mapping table indices to rows of information about 

18 additional virtual ports to which the host controller has access through the port adapter. 
19 

20 The HOST ID, for example, is the IP address of the host controller port. The 

21 HOST_ID could have the same format as the volume group name of the table in FIG. 5; 

22 i.e., a host name and controller sequence number 

23 
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1 If the optional lists of indices to the virtual port table are not used, the V_PORT 

2 LIST POINTER would simply be a flag indicating whether or not there is more than one 

3 virtual port associated with the host controller port. If there is only one, it is found in the 

4 V_PORT INDEX column of the virtual port host table. If there is more than one, then the 

5 entire list can be found by scanning the HOST INDEX column of the virtual port 

6 mapping table 282 for entries having a HOST INDEX matching the index of the row in 

7 the virtual port host table containing the information for the host controller port. 

□ 

^r.n 9 Referring to FIG. 25, there is shovra a format for the virtual port mapping table 

10 282. The table 282 includes a unique row for each virtual port accessed through the port 

!j 1 1 adapter. The table 282 includes a column for the V_PORT_ID of the virtual port, a 

b 

i'4 12 HOST INDEX to a row of the virtual port host table for the host controller port associated 

ru 

g 13 with the virtual port, a private/shared flag, and a LUN TO LOGICAL VOLUME MAP 

i 

' ^ 14 specifying the set of LUNs at the virtual port, the set of logical storage volumes 

15 accessible from the virtual port, and the mapping between the LUNs and the logical 

16 storage volumes accessible from the virtual port. The V_PORT_ID is a primary key for 

17 the table 282. The table 282, for example, is sorted by the V_PORTJD or has an 

18 associated hash table directory to facilitate searching of the table for a specified value of 

19 the V_PORTJD. The VPORTJD could be an IP address for the virtual port. 
20 

21 The LUN TO LOGICAL VOLUME MAP in each row of the table 282 could use 

22 the format of FIG. 19 or FIG. 20 Mdth a fixed number of either the entries shown in FIG. 

23 19 or the entries shown in FIG. 20. Since there would be a fixed number of possible 
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1 entries of the format of FIG. 19 or FIG. 20 but less than all of the entries might be used at 

2 any given time, the unused entries could be filled in with a null value for the LUN, such 

3 as a zero LUN value. The first entry would always be used, and any other entries used 

4 would be contiguous with the first entry, so that all of the entries used could be found by 

5 scanning and testing the LUN value in the entry. Alternatively, the LUN TO LOGICAL 

6 VOLUME MAP for each virtual port could be preceded with an integer value indicating 

7 the number of entries used in the map at any given time. 



a 8 

a 



9 The LUN TO LOGICAL VOLUME MAP in each row of the table 282 could be a 

10 bitmap in the form of a LUN to logical volume mapping matrix. The logical OR of all 

1 1 the rows of such a matrix would be a bitmap indicating all of the logical volumes 

12 accessible from the virtual port. The logical OR of all the columns of such a matrix 

13 would be a bitmap indicating all of the LUNs accessible from the virtual port. The use of 

14 such a mapping matrix would not be a practical altemative if there were a large number 

15 of virtual ports, hosts, possible LUNs, and logical volumes, since the number of bits of 

16 memory for storing such all of the mapping matrices would be the product o the number 

17 of virtual hosts, the number of possible LUNs, and the number of logical volumes. 
18 

19 Referring to FIG. 26, there is shown a flowchart of a routine executed by the 

20 microprocessor of the port adapter to provide a service for reporting the virtual ports 

21 accessible to a host controller port through the port adapter. This service could provide 

22 such a report when a host controller logs in to the data network, or when a host controller 

23 port requests the information fi-om a name server of the virtual switch provided by the 
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1 port adapter. In a first step 301, the microprocessor searches the virtual port host table for 

2 an entry including a specified HOST^ID. In step 302, execution branches to step 303 if a 

3 table entry is not found for the specified HOSTJD. In step 303, the port adapter reports 

4 that there are no V_PORTS accessible to the host through the port adapter, and the 

5 routine is finished. 
6 

7 In step 302, execution continues to step 304 if a table entry is found for the 

O 8 specified HOSTJD. In step 304, the port adapter reports that the V_PORT of the 

j n 

VI 9 V PORT index in the table entry is accessible to the host. In other words, the 

m 

Ifl 10 microprocessor reads the V PORT INDEX fi-om the row of the virtual port host table 

55 1 1 containing the specified HOSTJD, and then indexes the virtual port mapping table with 

Q 

|:r^ 12 the V_PORT INDEX to find the first V_PORTJD associated with the HOSTJD. In 

riJ 

|5 13 step 305, the V_PORT LIST POINTER is compared to zero, and if it is zero, then the 

14 routine is finished. Otherwise, execution continues from step 305 to step 306. 

15 

16 In step 306, the V_PORT list pointer is used to access the list of additional indices 

17 to accessible V__PORTS in the virtual port mapping table. Finally, in step 307, the port 

1 8 adapter reports that the indexed V_PORTS are accessible to the host through the port 

19 adapter, and the routine is finished. 
20 

21 Referring to FIG. 27, there is shown a flowchart 320 of a routine executed by the 

22 microprocessor of a port adapter when the port adapter receives fi-om a host controller 

23 port a volume access or Report LUNs request to a specified virtual port. To ensure 
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1 compliance with the Fibre Channel standards, this Report LUNs request might be 

2 different from and in addition to the standard Report LUNs command. The Report LUNs 

3 request of FIG. 27 reports the storage LUNs accessible to a specified host controller port, 

4 in contrast to the standard Report LUNs command which could report all LUNs 

5 accessible from a virtual port including all storage LUNs accessible from the virtual port 

6 by any of the hosts. In response to a standard Report LUNs command directed to a 

7 virtual port, the port adapter would search the virtual port mapping table 282 of FIG. 25 
O 8 for the V_PORT_ID specified by the Report LUNs command to find the table entry 

9 including the V_PORT JD, and then report all of the LUNs included in the LUN TO 

rn 

\n 10 LOGICAL VOLUME MAP in the table entry, 
u 11 

12 In a first step 321 of the flowchart 320, the microprocessor searches the virtual 

rs 

13 port mapping table for the entry of the virtual port specified by the host. If such a table 

ru 

14 entry is not found, then execution branches from step 322 to step 323. In step 323, the 

15 request is denied, and the routine is finished. If such a table entry is found, then 

16 execution continues from step 322 to step 324. In step 324, the microprocessor obtains 

17 the HOST_INDEX of the entry of the virtual port mapping table. In step 325, the virtual 

1 8 port host table is indexed with the HOST_INDEX. 
19 

20 In step 326, the HOST_ID of the host controller port requesting access is 

21 compared to the HOST_ID in the indexed entry of the virtual port host table. If the 

22 HOST ID of the host controller port requesting access is not equal to the HOST ID in 

23 the indexed entry of the virtual port host table, then execution branches from step 326 to 
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1 step 323. In step 323 the port adapter denies the request, and the routine is finished. If 

2 the HOST ID of the host controller port requesting access is equal to the HOST_ID in 

3 the indexed entry of the virtual port host table, then execution continues from step 326 to 

4 step 327. 
5 

6 In step 327, the microprocessor checks whether the port adapter's physical port 

7 "A" or "B" from which the request was received is the same as the physical port "A" or 
|j3 8 "B" indicated by the PORT A/B flag in the indexed entry of the virtual port host table. If 

in 

9 not, then execution branches from step 327 to step 328. In step 328, execution branches 

m 

i,n 10 from step 328 to step 323 to deny the request if a "fixed port option" is selected. The 

1 1 "fixed port option" would be selected if it is desired for a host controller port to access 

12 the specified virtual port only through a specified one of the physical "A" or "B" ports of 

I y. 

CQ 

13 the port adapter. This option could apply or not apply to all of the host controller ports, 

ru 

14 or the option could be specified by a flag (not shown) in each entry of the virtual port host 

1 5 table to selectively apply the option to each host controller port. For example, the option 

16 could be selected for desktop workstations, and not be selected for portable host 

17 computers. If the fixed port option is not selected, then execution continues from step 

18 328 to step 329. In step 329, the microprocessor switches the PORT A/B flag in the table 

19 entry. Execution continues from step 329 to step 330 of FIG. 27. Execution also 

20 continues from step 327 to step 330 of FIG. 27 if the request was received from the port 

21 adapter's physical "A" or "B" port indicated by the PORT A/B flag in the indexed entry 

22 of the virtual port host table. 
23 
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1 Referring to FIG. 28, in step 330 the S_ID from the request is compared to the 

2 S_ID in the indexed entry of the virtual port host table. If the S_ID of the request does 

3 not match the S_ID in the indexed entry, then execution branches from step 330 to step 

4 33 1 to recover from the unreported state change. If the port adapter cannot verify the new 

5 S_ID in the request, then the request is denied; otherwise, the S_ID value in the indexed 

6 entry is changed to the new value in the request, and execution continues in step 332. 

7 Execution also continues from step 330 to step 332 if the S_ID from the request matches 
□ 8 the S_ID in the indexed entry. 

a 
i:s 

'^ 10 In step 332 execution branches to step 333 for processing a "Report LUNs" 

js 1 1 request from a host controller port. In step 333, the port adapter reports to the host 

H 12 controller port the LUNs in the LUN TO LOGICAL VOLUME MAP of the indexed 

ry 

'5 13 entry of the virtual port mapping table, and the routine is finished. Execution branches 

14 from step 332 to step 334 for processing a storage access request from a host controller 

15 port. In step 334, the microprocessor searches the LUN TO LOGICAL VOLUME MAP 

16 of the indexed entry of the virtual port mapping table for the specified LUN to access. If 

17 the LUN to access is not found, then execution branches from step 335 to step 336. In 

18 step 336, the port adapter reports to the host controller port that the specified LUN to 

19 access is unknown, and the routine is finished. 
20 

21 Execution continues from step 335 to step 337 if the LUN to access is found in 

22 the LUN TO LOGICAL VOLUME MAP of the indexed entry of the virtual port mapping 

23 table. In step 337, the private/shared flag is inspected for the indexed entry of the volume 
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1 access table. If the private/shared flag is set, then execution continues from step 337 to 

2 step 338. In step 338, the port adapter accesses the logical volume mapped to the LUN 

3 specified by the host controller, and the routine is finished. If the private/shared flag is 

4 not set, then execution branches from step 337 to step 339 to access locking information 

5 in the cache memory for the logical volume mapped to the LUN specified by the host 

6 controller. If the volume is private to the host controller, then access is permitted, and 

7 execution branches from step 340 to step 348 to access the volume. If the volume to 

□ 8 access is public and is already locked in a fashion incompatible with the access requested 

in 9 by the host (e.g., the volume is already write locked and the host controller requests a 

; ^ 10 read or a write access, or the volume is already read locked and the host controller 

jg 1 1 requests a write access) then access not presently permitted. The host controller's S_ID 

Q 

|.«^ 12 is placed on a wait list, in order to notify the host controller when the logical volume 

ru 

13 becomes available; execution branches from step 340 to step 341 to temporarily deny 

I'll 

14 access to the volume, and the routine is finished. If the volume to access is public and is 

15 not locked or is locked in a fashion compatible with the requested access by the host 

16 controller (e.g., the volume is already read locked and the host controller requests a read 

17 access), then a lock is granted to the host controller, and execution branches from step 

18 340 to step 338 to access the volume, and the routine is finished. 
19 

20 GRAPHICAL USER INTERFACE FOR VIRTUAL PORTS 

21 

22 A conventional graphical user interface (GUI) for a cached storage subsystem of 

23 the type shown in FIG. 1 includes a grid of logical volumes to storage adapter ports. At 
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1 each intersection of the grid, the target/LUN is assigned. This provides a mechanism for 

2 the system administrator to set and view the mapping of LUNs to logical storage volumes 

3 and the storage adapter ports used for accessing the physical storage volumes that make 

4 up the logical storage volumes. Referring to FIG. 29, there is shown an example of how 

5 the mapping of LUNs to logical storage volumes can be incorporated into a GUI for a 

6 cached storage subsystem that uses virtual ports. It is still possible to use a grid for 

7 defining the relationship between logical volumes, LUNs, and storage adapter ports, but 

j;3 8 the GUI display screen is partitioned into groups of V_PORTs by physical port of the 

m 

9 port adapters. In this example, each intersection allows the definition of the LUN only. 

^; 10 FIG. 29, for example, shows a single grid 345 for the logical volumes accessible by a host 

□ 1 1 controller port linked to the physical port A of a port adapter 1 addressing LUNs at a 

P 

j'U 12 virtual port 1 . A similar grid could be displayed for each virtual port defined in the 

|3 13 storage subsystem. 
14 

15 Referring to FIG. 30, there is shown a GUI display screen for permitting the 

16 system administrator to set up the relationship between logical storage volumes of the 

17 storage subsystem (the volume source) and the volumes addressed by a host (the volume 

18 user). In this example, the GUI display screen includes, on the left, a list 346 in outline 

19 form of storage subsystem components down to a set of logical volumes for one virtual 

20 port, and on the right, a list 347 in outline form of host components down to a set of 

21 LUNs as addressed from one host controller port. The "bus" in the right column refers to 

22 a host controller, and the "target" in the right column refers to a port of the host 

23 controller. The display starts out with a list of storage subsystems and a list of hosts 
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1 linked by the data network. The system administrator selects a storage subsystem or host 

2 by clicking on it with a pointing device such as a mouse interfaced to the service 

3 processor, and expand the list to the next lower level by double clicking on a selected 

4 item of the list. By expanding the lists down to the port adapter and host controller port 

5 levels, the system administrator clicks on a particular physical adapter port in the left 

6 column to get to virtual ports and logical volumes for the particular adapter port, and then 

7 clicks on a particular controller bus and target to get the LUNs as addressed by the host. 

I' 3 

X 8 The system administrator selects an unallocated virtual port in the left column for a 

i;0 9 physical adapter port and then selects a host controller port in the right colxmm to allocate 

m 

Ifi 10 the host controller port to the virtual port. The system administrator could then select a 

1 1 logical storage volume, or selected range of volumes, and select a LUN or range of LUNs 

I" 

i-y 12 as addressed by the host controller port, to establish the LUN to logical volume mapping. 

□ 13 For example, in FIG. 30, the GUI display has drawn a line 348 between the selected 

ru 

14 logical storage volume VOL! and the selected LUN 2 to show that such a mapping has 

15 been established. The system administrator could also select an item on either list and 

16 "collapse" the list to go back up to the level in the outline above the selected item. For 

17 data security, any unallocated logical volume should be re-formatted or erased of any pre- 

1 8 existing data before being allocated. 
19 

20 The system administrator could select an item on either list and select a 

21 "properties" option to display properties of the selected item. For example, the grid 345 

22 of FIG. 29 could be one of the properties of the virtual port 1 . The properties of a logical 

23 storage volume would include the host controller ports having access to the logical 
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1 storage volume, and the paths or adapter ports and virtual port through which the host 

2 controller ports can access the logical storage volxime. 
3 

4 The preferred embodiment of the graphical user interface used by the system 

5 administrator has the following additional functions. For security, password protection is 

6 desirable on a user and/or host level. For flexibility, it is desirable to have be able to 

7 modify or view a host's volume configuration from local or remote hosts. The systems 
O 8 administrator should have the ability to read and write the physical and virtual port names 

) of storage subsystem as defined in the a configxiration database. The configuration 



m 



\f\ 10 database should contain flags that indicate if a volume can be shared. If sharing of a 

I s 

1 1 volume is forbidden, the graphical user interface does not allow it to be allocated to more 

12 than one host. If it can be shared, the system administrator is notified of this upon 



13 configuration creations of shared volumes. 



m 



14 

15 The graphical user interface may recognize an "Install" command to be use when 

16 a new host controller port is introduced. The install command writes the host's 

17 configuration information into the volume configuration database. 
18 

19 The graphical user interface may recognize a "Replace" command to replace a 

20 host controller port. The graphical user interface maintains a list of the WWNs for each 

21 controller port on the host. The graphical user interface also keeps a historical database 

22 of all WWNs ever known to be networked to the storage subsystem Using this 

23 information, the graphical user interface can determine that a known host controller port 
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1 is not bound to a configuration and also a configuration that contains a new host 

2 controller port that did not previously exist on the host. As described above with 

3 reference to FIG. 18, the system administrator should be involved in the introduction of 

4 any new host controller ports into the configuration. 

5 

6 The graphical user interface may recognize a "Configuration" command to enter 

7 or modify a host's volume configuration information for a local or remote host. This 

^3 8 configuration information should be stored in the configuration database in the storage 

I ri 

!;^^ 9 subsystem. 

m 

le 1 1 The graphical user interface should recognize a "remove from service" command 

led 

H 12 for use when removing a host or host controller from service. In response to this 

ru 

m 13 conmiand, the graphical user interface deletes the associated volxmie configuration 

14 information from the database. 
15 

16 The graphical user interface may recognize a "View Configuration" command, 

17 and respond by displaying a schematic diagram of the fabric or loop in the data network, 

18 and displaying attribute information (such as port WWN) according to its availability. 
19 

20 The graphical user interface may provide separate displays of the assignments of 

21 the virtual ports to the host channel ports, the mappings of LUNs to logical volumes, and 

22 the allocation of the logical volumes to the storage adapter ports and to the storage 

23 devices. 
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2 One the system administrator defines the virtual ports and mappings between the 

3 logical volumes and LUNs, the storage subsystem can automatically assign network 

4 addresses, WWNs and S__IDs to the virtual ports, and obtain the WWNs and S_IDs of the 

5 host controller ports when the host controller ports log in to the network. This could be 

6 done in a fashion similar to that described above with respect to FIGs. 16 to 18, by setting 

7 unknown host controller port WWNs and S_IDs to null values. 



l4* 

Q 8 

Q 

9 Since a cached storage subsystem of the type shown in FIG. 1 typically has a 

i;s 

m 

' ' 10 small number of physical adapter ports, such as 16, the method of virtual ports can be 

1 1 introduced in such as system using a small number of V_PORTs per physical ports. For 

12 example using only 4 V_PORTs per physical port will allow the cached data storage 

ru 

13 system to 64 ports. Once users would become familiar with the concept of the virtual 

ru 

14 ports, the number of virtual ports permitted per physical port could be increased, and 

15 additional facilities could be introduced for volume configuration and site management of 

16 the Fibre Channel network. These facilities could permit involvement of the host in 

17 allocating and de-allocating logical storage volumes and changing the configuration and 

1 8 mapping of LUNs to logical storage volumes. 
19 

20 HOST INVOLVEMENT IN VOLUME CONFIGURATION AND MAPPING. 

21 

22 A number of facilities could be used to permit host involvement in the storage 

23 volume configuration and mapping. The facilities should not assxmie the existence of 
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1 "trusted" hosts. The identity of a host requesting a change in the volume configuration 

2 and mapping should be authenticated. 
3 

4 A primary copy of the configuration information for the volumes accessible to a 

5 host is kept in the storage subsystem and on the host. The host should be able to access 

6 the primary copy on the storage subsystem if a host's local copy is not available. 

7 However, an exception to this would be a host that is responsible for storing the primary 

8 copy of another host. The configuration information should be accessed through read and 
l«Q 9 write commands and should be protected against accidental wntes. For example, the 

\M 10 configuration information is stored in a predefined logical volume, such as a volume 

1 1 accessed at LUNO, that functions as a gatekeeper device. 

Q 13 No host should be able to gain access to another host's volxmie unless sharing is 

14 enabled. Sharing should be permitted when desired. For example, the volume attributes 

15 and locking information (89 in FIG. 7) associated with the logical volumes includes, a flag 

16 for each volume to indicate whether or not sharing of the volume is permitted. This flag 

17 is inspected when the graphical user displays the logical volumes available for allocation, 

1 8 or when a host requests allocation of a volume. A host controller driver program also 

19 may limit (or filter) the number of volumes that can be seen by the host operating system 

20 (and thus the host applications) by using the information contained in the configuration 

21 database. 
22 

23 Each host should be allowed to use its own volume address space (LUNs) 
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1 regardless of the volume address space used in the storage subsystem. This is the 

2 function of mapping LUNs to logical volumes, as described above. 
3 

4 Management of the configuration information should be permitted from any 

5 location within the data network enterprise. A system administrator should not be 

6 required to log into any host that is the target of the configuration changes. 
7 

0 8 The facilities should work well with a variety of existing host and storage system 

1 n 

9 components, for example, by preserving SCSI conventions, and supporting both IP and 

m 

\jl 10 SCSI conventions within a single host controller. 

i5 11 

12 The facilities should provide for installation, volume reconfiguration, topology 

13 reconfiguration, boot from local disk, boot from Fibre Charmel disk, normal I/O 

i'U 

14 operation, replacement of a controller firom existing host, replacement of a controller 

15 known in the current configuration with an unknown host during installation, and reuse of 

16 a controller known in the current configuration as a replacement controller. Suitable 

17 installation, volume configuration, normal I/O operation, and controller replacement 

1 8 facilities have been described above. 
19 

20 Topology reconfiguration occurs whenever a connection is added, deleted, or 

2 1 modified in the data network. Some of the types of problems that can occur is for the 

22 S_ID of a host controller port to change. Therefore, the ports should login to the data 

23 storage subsystem to register the new S_IDs. Otherwise, the port adapters may recognize 
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1 and recover from unreported state changes, as described above. A host controller port 

2 may become unlinked from a physical "A" port and relinked to the physical "B" port. If 

3 the "portable host" option is selected, this causes no difficulty. A host controller port 

4 may become unlinked form the physical port of a first port adapter and relinked to the 

5 physical port of a second port adapter. Unless the same virtual port is defined as 

6 accessible to the host controller port in each of the port adapters, this will cause the 

7 second port adapter to reject host requests. In this case, it is necessary to transfer the 

D 8 virtual port definitions and mappings from the first storage adapter to the second storage 

{□ 

9 adapter. 

in 

5= 1 1 The facilities that can be used by a host for booting are the routine described 

□ 

12 above for reporting to a host the virtual ports available to the host, and the routine 



ru 



13 described above for reporting to the host the LUNs available to the host from a virtual 

14 port. These routines could be programmed into each port adapter. Altematively, a host 

15 could read the primary copy of the configuration in formation in the "gatekeeper" volume 

16 of storage in the storage subsystem. In any case, the host must be programmed to seek 

17 out the LUNs that it can access. For example, a host controller routine first powers up 

18 and logs in to the network. Then a mapping driver in the host is loaded into the host's 

19 memory, and the mapping driver contains the network addresses of the data storage 

20 subsystem adapter ports to access, and contains instructions for sending the commands to 

2 1 these adapter ports to obtain the LUN information or read the primary copy of the 

22 configuration information in the storage subsystem. The host operating system invokes 

23 the mapping driver to obtain the LUNs accessible to it. 
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2 It is also desirable to provide the host with the capability of using a logical 

3 volume in the storage subsystem as a "boot disk." Booting over Fibre Channel allows 

4 support of diskless systems and, more importantly, provides reliability and a means for 

5 disaster recovery. Booting over the Fibre Channel is especially useful when the host is a 

6 commodity server. In this situation, the storage subsystem can provide the disk storage 

7 for a plurality of the commodity servers. The commodity servers can handle wide area 
'3 8 network communication protocols with other hosts such as workstations, and file system 



S 10 



is 

P 

i'y 

□ 



management for file systems stored in the logical volxmies of the storage subsystem. 



1 1 The use of a logical volume in the storage subsystem as a "boot disk" increases 

12 reliability of a host because the standalone disk in a typical server represents the 

13 component with the worst mean time before failure. In the past, the system administrator 

14 has been willing to treat a local disk failure as a server failure. The storage subsystem, 

15 however, has a fault-tolerant architecture and uses techniques such as mirroring of the 

16 storage devices or RAID so that a logical volume in the storage subsystem has a much 

17 higher mean time before failure than the typical server or server disk. The storage 

1 8 subsystem also enhances disaster recovery capabilities because it is easy to recover from 

19 the destruction of a commodity server simply by plugging in a replacement commodity 

20 server having the same hardware configuration. 
21 

22 A host computer boots firom a present disk address. This is accomplished through 

23 one of the following methods. In the PC environment, the host controller is a SCSI 
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m 



1 controller that must act like an IDE controller and answer all interrupts that are targeted 

2 for the disk. The host controller uses a specific SCSI target that has either been 

3 hardwired in the design of the host controller stored in nonvolatile memory on the host 

4 controller. In other environments, the motherboard of the host typically contains the 

5 SCSI address to use in non-volatile memory. The address must be available before any 

6 information on a disk is available to be read. This means that the nonvolatile memory 

7 must be used either on the motherboard or the host controller. 



) The address of the boot disk in the Fibre Chaimel environment is a storage 

m 

\j\ 10 subsystem port WWN and a storage subsystem LUN. The nonvolatile memory must 



1 1 store a complete path to the boot volxmie, including the SCSI address to be used by the 

12 host as well as the storage subsystem WWN and LUN. 
13 

14 To support booting from a storage subsystem volume, the host controller is 

15 provided with a facility to read and write the boot information. This information should 

16 also be saved in the storage subsystem volume configuration database in order that a 

17 replacement host controller can be loaded with the correct information during 

1 8 configuration. To facilitate this, the read and write boot commands would each use the 

19 following structure: 
20 

21 struct (int64 hba_wwn; /* which host controller port to address with this 

22 cmd */ 

23 int bus; /* the value for the host bus */ 
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1 int target; /* the value for the host target */ 

2 int lun; /* the value for the host lun */ 

3 int64 symm_vwvn; /* the value for the storage subsystem port WWN */ 

4 int synun Jun; /* the LUN to use on the storage subsystem port */ 
5 

6 HOST REQUESTS FOR DYNAMIC ALLOCATION AND DE-ALLOCATION 



7 OF LOGICAL VOLUMES 
Q , 

m 

rg 9 After an initial configuration by the system administrator and during normal 

m 

'Jl 10 operation of the data processing system, a host application may need additional storage 
1 1 volumes, or may no longer need storage volumes allocated to it. To avoid significant 

uJ 

j«y 12 involvement of the system administrator in this situation, the port adapters of the storage 

!!Q 

□ 13 subsystem can be programmed to recognize "mount" and "unmount" commands from the 

ru 

14 host controller. These commands can be similar in form and function to the Unix 

15 mount/unmount commands, and would be sent to the storage subsystem gatekeeper (e.g., 

16 at LUNO). A command line for the mount command, for example, has the form: 
17 

18 storage_subsystem_mount volume_group__namc host_controller host_lunl ... 

19 host_lunN 
20 

21 A command line for the unmount command, for example, has the form: 

22 

23 Host controller ID (the value assigned by the switch at login time) 
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1 

2 Hostname IP address 

3 

4 Volume group name 

5 

6 Host LUN 1 

7 

i.i 

□ 8 

!<c? 

10 HostLUNn 

!□ 

UA 12 In the storage subsystem, the gatekeeper facility responds to the mount command 

1*9 3 

13 by allocating free logical storage volumes to the specified LUNs, and creating an entry in 

Q 

' ^ 14 the volume access table or tables for the specified volume group name and the LUN to 

15 logical volume mappings. The entry would include the host controller port's S JD and 

16 WWN. The host could specify attributes for logical volume to be allocated to each 

17 volume, such sharing enabled, or sharing enabled for read-only access. In this example, 

18 the volumes allocated to the host would all be private, and the private/shared flag for the 

19 volume group name would be set. The system administrator would set up in advance any 

20 assignment of already volumes to be shared between different host controller ports. It 

21 would be possible, however, to have an option whereby one host controller port could 

22 request and obtain mounting of volumes shared with another host controller port. If LUN 

23 to logical volume mapping is used, this option could be limited to sharing between two 
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1 ports of the same host controller, or two ports of the same host, because such an option 

2 assumes that the LUN to logical volume mapping would be the same for the two host 

3 controller ports. In response to such a command, the gatekeeper would check whether the 

4 attributes specified in the command for the LUNs to be assigned (such as shared, shared 

5 for read-only access) match those of the already allocated LUNs. 
6 

7 The mount command could also have an option to define the volume group name 

8 as local to just the port adapter that receives the command, or global for all of the port 

9 adapters in the storage subsystem. In the local case, an entry for the volume group name 



j r| 10 would be created only in the volume access table stored in the port adapter that received 

1 1 the mount command. In the global case, an entry would be created for the group name in 

\f 12 the volume access table in each port adapter of the storage subsystem. In any case, it 

13 would be desirable for a host to or host controller have the ability to access the volumes 

14 assigned to it through more than two of the ports in order to provide load balancing. This 

15 would include not only resending a data access request to another storage subsystem 

16 adapter port in response to a port adapter busy signal, but also spreading the host's load 

17 over a multiplicity or all of the storage subsystem adapter ports, for example in a round- 

18 robin fashion, to decrease the likelihood of any adapter port becoming busy. Such a 

19 method can be employed by a host to provide load balancing without any knowledge of 

20 the actual loading conditions on any of the ports, and without any coordination with the 

21 storage subsystem or other hosts. The round robin technique can be implemented simply 

22 by the host or host controller incrementing an index prior to sending each data access 

23 request, testing whether the index is equal to the number of subsystem adapter ports 
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1 accessible to the host and if so resetting the index, and then directing the host's data 

2 access request to the accessible storage subsystem adapter port specified by the index. 
3 

4 The gatekeeper facility responds to the unmount command by checking whether 

5 the specified LUNs are all the LUNs assigned to the volume group name in the volume 

6 access table, and if so, removing the volume group name, and deallocating the volumes 

7 allocated to the group name. Normally, private volumes are erased when they are 

O 8 deallocated. There also could be an option to deallocate some but not all of the logical 

jig 9 volumes assigned to a volume group name, and in this case only the entry for the volume 

m 

j^n 10 group name would remain, but the volume list or LUN to logical volume map for the 

iE 1 1 entry would change. 

13 



iy 



12 

13 When a controller is replaced, the "loss of light" condition (when the controller is 

14 taken off line) will cause the automatic logout of the port from the switch. (If a fabric 

15 exists, the problem of propagating the information through a fabric switch has not yet 

16 been solved by the FC standard.) This information will be passed on to the storage 

17 subsystem, which will remove the entry from the table. After the host is rebooted, the 

18 moxmt command will be executed and the coimection will be re-established. 
19 

20 Some hosts such as servers should be continuously logged in to the storage 

21 subsystem in the absence of a failure condition or planned removal from the data 

22 processing system. In this case, the host should unmount all of their assigned volumes 

23 before logging out for a planned removal. To respond to a failure condition, the storage 

H: 468429(@ 1 FXOI I.DOC) 72 



1 subsystem could be programmed to respond to a report of a state change indicating that 

2 such a host has been disconnected from the data network by checking the volume access 

3 table or tables for any volume group names corresponding to the host, and if any such 

4 volume group name has been found, reporting the error to the system administrator. The 

5 system administrator can then decide whether any volumes allocated to the host should be 

6 deallocated and erased for use by other hosts. 
7 

P 8 An example of a procedure using the host and storage subsystem facilities during 

['^ 9 a first-time host installation in the data network is as follows: 

m 

■ill 1 . The host controller of the host powers up. It performs its own initialization 

□ 

jlj^ 12 but does not execute any operations related to volume configuration. 

''^ 13 

ru 

14 2. The host boots over a host CD-ROM drive or local disk (for example in the 

15 case of a Fibre Channel storage network added to an existing system) or network storage 

16 such as a logical volume in the storage subsystem. 
17 



18 3. Moimt a network disk containing the host facilities (seen by the host as an 

19 application program) or load the host facilities from the host CD-ROM drive. 
20 

21 4. Start a graphical user interface for the host facilities and enter an Installation 

22 Mode. 
23 
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1 5. The host installation facility of the graphical user interface queries each host 

2 controller port for its port WWN. 
3 

4 6. The host installation facility interrogates the data network for the WWNs of 

5 the storage subsystem ports. If the host controller port is in a Fibre Channel loop, then 

6 host installation facility probes the loop through a host controller for the WWNs... 

7 Otherwise, the host installation facility calls the fabric name server to obtain a list of list 

8 of SCSI device WWNs, and the full list is searched for WWNs storage subsystem ports. 
% 9 

i fl 10 7. The host installation facility reads the storage subsystem port text names, for 

1 1 example from block zero of the port configuration data in each storage subsystem's 

Q 

ji^ 12 "gatekeeper" volume at LUNO. If the port text name entries are zero, indicating that they 

Q 1 3 have never been entered by the system administrator, then a default of 

ru 

14 <storage_sybsytem_name>/<storage__subsystem_adapter_port #> is used. 
15 



16 8. The host installation facility displays to the host user each storage subsystem 

1 7 adapter port WWN with its corresponding text name. 
18 

19 9. When the host user selects a given storage subsystem adapter port WWN, the 

20 host installation facility executes a "Report LUNs" conmiand. Using an application 

21 interface (API) function called getallprtlunQ, all of the LUN bitmap entries and their 

22 corresponding volume group names are read from the storage subsystem volume 

23 configuration database in the storage subsystem's "gatekeeper" volume at LUNO. The 
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1 logical OR of all of the bitmasks from each entry provide a single bitmask of all allocated 

2 volumes. While reading each entry, the host installation facility also checks each 

3 hostname as it appears in each volume group name returned from the API. This is 

4 compared with the current hostname in order to look for previous entries in the 

5 configuration database for this host. Upon completion of this sequence of actions, the 

6 host installation facility holds the following information: 
7 



8 AH volumes available on the storage subsystem adapter port; 

Q 



9 

10 All volumes on the storage subsystem adapter port that are already allocated to 



1 1 other hosts; 

ry 

^5 13 All volumes that are already allocated to this host for this storage subsystem port; 

ry 

14 

15 Port WWNs for each host controller port of this host; and 

16 

17 Port WWNs and text names for all storage subsystem ports available. 

18 

19 10. The host user can create one set of allocated volumes for each host controller 

20 port residing on the host. The host facility graphical user interface associates an index 

21 number with each volume set, and displays to the host user each index number alongside 

22 each host controller port WWN. The graphical user interface also displays the volumes 

23 allocated to the host and those volimies that are not allocated to any host. The graphical 
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1 user interface also displays, on demand, a list of volumes that are allocated to other hosts. 

2 From these, the user can select volumes to be allocated to the a selected host controller 



3 port of the host. If the volume is already allocated to another host and is marked as 

4 unshareable, an error is generated. 



5 



6 1 1 If the host user initiates a save operation, the host installation facility writes all 

7 the configuration information along with the host controller port WWN to the storage 

Q 8 subsystem volume configuration database through the gatekeeper. The storage subsystem 

q 

9 makes corresponding revisions to the volume access tables in its cache memory and port 
Ipj 10 adapter memory. 

teF 11 

Q 

H 12 

m 

'3 13 HOST AUTHENTICATION 




15 In a storage system network, is desirable to authenticate host identity to prevent 

16 tampering with especially critical data such as the configuration information, which could 

17 enable unauthorized access to the most sensitive volumes of storage in the system. 

18 Therefore, whenever a host requests a change in the configuration information (i.e., write 

19 access), it is desirable to use a challenge-response protocol by which the host must 

20 identify itself in response to a request from the storage subsystem. Preferably this 

21 challenge-response protocol incorporates a machine-based security feature that generates 

22 a response that caimot be re-used if intercepted. 
23 
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1 The machine-based security feature includes an encryption key stored in memory 

2 of the hosts or host controllers. Each host controller, for example, has a unique 

3 encryption key that is different from the keys of the other host controllers. Preferably the 

4 encryption key is stored in "write only" memory of a monolithic semiconductor 

5 integrated circuit chip (hereinafter referred to as an "identity" chip) in such a way that the 

6 stored encryption key can only be read by encryption circuitry on the chip. The "write 

7 only" memory could be an electrically erasable and programmable read-only memory 

□ 8 (EEPROM) array with a metal shielding layer over the memory array so that the stored 

O 

jl-g 9 key would be virtually impossible to recover by probing, inspection, disassembly, or 

lin 

j r| 10 "reverse engineering" of the identity chip. In this case, would be possible to publish the 

u 

15 1 1 method by which the identity of the chip is authenticated. The identity chip, for example, 

12 is a microcontroller having such a write-only EEPROM program memory progranmied to 

13 perform a unique encoding fimction corresponding to the key. The "write only" memory 

■■bI 

ts: s 

ly 

14 and the encryption circuitry could be a small portion of the circuitry on the identity chip. 

1 5 For example, the identity chip could be a microprocessor chip used as the main processor 

16 of a host controller circuit card or workstation. 
17 

18 By incorporating the identity chip into the host controller, host motherboard, or 

19 the main processor chip of the host, is possible to verify the identity of the host controller, 

20 host motherboard, or main processor chip of the host . The identity chip, however, does 

21 not verify the identity of the user of the host. To guard against unauthorized users, it is 

22 still necessary to verify the identity of the user. User verification would be done by the 

23 operating system in the usual fashion, for example at a user login time when the user is 
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1 requested to enter a password. 
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m 
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ru 



3 The identity chip could be attached to or incorporated into any kind of object or 

4 thing in order to authenticate the identity of that object or thing. For example, the chip 

5 could be embedded in a debit or credit card to authenticate the identity of the card before 

6 debiting or charging a corresponding account. The chip could be attached to an object or 

7 thing together with a wireless data transceiver to permit remote interrogation of the chip, 

8 for example in a tag implanted under the skin of an animal to remotely authenticate the 

9 identity of the animal. The identity chip could store descriptive information about the 

10 object or thing to which is attached, in order to permit verification that the identity chip 

1 1 has not been transferred to a different object or thing. If the descriptive information is 

12 unique to the particular object or thing, then the descriptive information could be 

13 incorporated into the secret key. For example, if the identity chip is used in a tag for an 

14 animal, part of the key could include a sequence of the genetic code of the animal. 




FIG. 29 shows a preferred construction for the identity chip. The identity chip 

17 350 includes en^ig^ption circuitry 351 and a "write-only" EEPROM memory 352 for 

18 storing at least one key 353xThe key 353 can be written into the memory 352 from a data 

19 path 354 including external leads cbimected to the chip. The key 353 can be read from 

20 the memory 352 by the encryption circuitty>l?ut the key cannot be read from the data path 

21 354 or any other external leads cormected to the chi^>sFor example, the encryption 

22 circuitry 352 includes a microprocessor 355 and a microcodeY«^-only memory (ROM) 

23 356 storing microcode executed by the microprocessor. The microprocessor is 
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1 prokrammed to recognize a command from the data path 354 for writing into the memory 

2 352 a key from the buys 354. The microprocessor is also programmed to recognize a 

3 command from the data path 354 for receiving a number from the data path, reading the 

4 key 353 from the memory 352, encrypting the number with the key, and transmitting the 

5 encryption reWt onto the data path. The microprocessor, however, will not recognize 

6 any command for transmitting the key onto the data path 354 or any other leads of the 

7 chip. In this sense^the memory 352 is a "write-only" memory. Moreover, the EEPROM 

8 memory 352 and at leW the internal data path 357 to the memory 352 are covered by an 

9 upper layer of metal 358Vshown in dashed lines in FIG. 3 1) on the chip 350 so that it is 
virtually impossible for the icey to be recovered by probing, inspection, disassembly, or 

1 1 "reverse engineering" of the chip. The EEPROM 352 could store a plurality of different 

12 keys, and the microprocessor comd recognize a command from the data path 354 for 

13 selecting which of the keys to use foi^ encrypting the number received on the data path. 
14 

15 FIG. 32 shows how identity chips "3161 , 363 are incorporated in the data processing 

16 system of FIG. 1 for authenticating host contryoUer identity. In this example, the Fibre 

17 Channel loop 41 is used for access to highly sensitive data, such as configuration 

18 information, stored in the cached storage subsystem 20. The identity chip 361 in the host 

19 controller 61 stores a unique secret key 362 for the h^sU:ontroller 61, and the identity 

20 chip 363 in the host controller 62 stores a unique secret key 364 for the host controller 62. 

21 Copies of the keys 362, 364 are stored in a list 365 in the hbst controller. The list 365, for 

22 example, is a table, and each key in the list 365 is associated with the WWN of a 

23 respective host controller known to the port adapter. A copy of tiie list 365 of keys is 
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1 \ stored in a logical storage volume of the storage subsystem, or the list of keys is stored in 

2 amonvolatile portion of the port adapter memory 77, so that the list will be retained if 

3 powfer to the port adapter is lost. Such a nonvolatile portion of the port adapter memory 

4 77 coul^ be provided by one or more identity chips constructed as shovra in FIG. 29. The 

5 port adaptek memory 77 further includes a list 366 of random numbers sent to the hosts. 

6 The list 366, for example, is maintained as a queue. The list of random numbers 366 and 
the list of keys 365vare used by host authentication routines 367 in the port adapter 
microcode 79. As the^random numbers are received by the hosts, the host controllers 
place the random numbers^in similar lists 368, 269 in their respective memories 370, 371. 
As used in this specification, the term "random number" would include a so-called 

1 1 "pseudo-random number" so long^^stiie number would appear to be selected at random 

12 during the typical duration of time thatva host controller is logged in to a port adapter. . 

13 For example, the random numbers transmihed by the port adapter to a host controller are 

14 generated by a conventional random number generator routine that is seeded at the time 

15 that the host controller logs in to the port adapter. The BASIC programming language, 

16 for example, provides such a random number generatori;putine. 
17 

18 Shown in FIG. 33 is a flowchart of the challenge-response protocol. The actions 

19 of the port adapter are shown on the left side of the flowchart, and related actions of a 

20 host controller are shown on the right side of the flowchart. The steps of the left side of 

21 the flowchart, for example, are performed by one of the host authentication routines (367 

22 in FIG. 32). The challenge-response protocol is used, for example, when a host controller 

23 logs in to the port adapter. Prior to login, however, the system administrator must load 
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1 the host controller keys into the port adapter and host controllers. This should be done in 

2 a secure fashion, to guarantee that the keys cannot be intercepted when they are 

3 distributed to the host controllers. The system administrator could load the keys into the 

4 port adapters through the service processor when assigning the logical storage volumes to 

5 the host controllers. In a similar fashion, the keys could be entered into each host 

6 controllers through a dedicated I/O port to avoid any need to transmit the keys over the 

7 data network. 



lifj 9 In a first step 38 1 , the host controller sends a request to the port adapter for some 

5 

lil 10 work. In step 382, the port adapter receives the work request. In step 383, the port 

1 1 adapter responds to the work request by sending back a "challenge" request including a 



jiy 12 random number that is used as a one-time password. Since the number is random and 

1:0 

j;3 13 changes every time it is needed, there is no way to predict it, nor record it and provide a 



14 false reply to a request for authentication. 
15 

16 In step 384, the host controller receives the random number and the request for 

17 verification from the port adapter. In step 385, the port adapter encrypts the random 

18 number with its copy of the host controller's key. Concurrently, in step 386, the host 

19 controller encrypts the random number with its copy of the encryption key. The 

20 encryption process can use any kind of encryption technique since the result never has to 

2 1 be decrypted. For example, the encryption could use the well-known method of the Data 

22 Encryption Standard (DES), or any sequence of encryption operations, for example, 

23 substitution, blocking, permutation, expansion, and compaction. It is also possible to use 
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1 the well-known RSA public/private key system. In the conventional use of the RSA 

2 system, public keys are used for encryption, and a private keys are used for decryption. 

3 Therefore, if the port adapter and the host controller used RSA system, the public keys 

4 would be kept secret and would used for encoding, and the private keys would not be 

5 used. 



7 In step 387, the host controller sends the encryption value to the port adapter. In 

'«3 8 step 388, the port adapter receives the encryption value from the port adapter. In step 



9 389, the port adapter compares the encryption value that it computed with the encryption 

10 value received from the host controller. If they match, then the host controller is 

1 1 authenticated, and the host controller is granted access to the storage subsystem. If they 

12 do not match, the host controller is denied access to the storage subsystem. 
13 

14 One preferred way of applying the "challenge-response" protocol in a Fibre 

15 Channel network is by using the Exchange IDs (Originator and Responder) within the 

16 Fibre Channel header of the Frame Structure. The primary function of the Fibre Channel 

17 network is to receive Frames from a source port and route them to a destination port. As 

18 shown in Fig. 30, a Frame 400 includes information to be transmitted (Payload 401), the 

19 source address (S_ID 402), the destination address (D JD 403), and various kinds of link 

20 control information. 
21 

22 Each Frame begins with a Frame Delimiter 404 indicating the start of the Frame. 

23 The Frame Delimiter 404 is immediately followed by a Frame Header 405. The Frame 
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1 Header is used to control link applications, control device protocol transfers, and detect 

2 missing or out of order Frames. The Frame Header includes the source address (S_ID 

3 402) and the destination address (D_ID 403). An optional header 406 may contain 

4 additional link control information. The Pay load 401 follows the Frame Header or the 

5 optional header. Four bytes of Cyclic Redundancy Check (CRC) follows the Payload. 

6 The CRC is used to detect transmission errors. The Frame 400 concludes with an End of 

7 Frame delimiter 408. 

□ 

l^g 9 The Exchange_ID 409 is an end portion ofthe Frame Header 405. The 

}^ 

1,0 10 Exchange lD includes an Originator_ID 410 and a Responder_ID 411. The originator of 

'I 1 1 a communication sends the first message with a value specified as the Originator_ID. 

j!y 12 The Originator_ID must be unique amongst all the currently active exchanges. The 

Q 13 responder receives the header. When it sends back a message, it places the Originator^ID 

14 plus its own Responder^ID into the header. This ID pair now comprises a unique 

15 Exchange_ID. 
16 

17 Once a host controller has logged in to a port adapter, it is desirable to 

18 authenticate the host controller for each storage access request. If the challenge-response 

19 protocol of FIG. 33 were used for each storage access request, however, the traffic on the 

20 data network would be substantially increased because the Frame for each storage access 

21 request from the host controller would be followed by a Frame for the "challenge" 

22 message from the port adapter, and a Frame for the "response" of the host controller. In 

23 order to eliminate the "challenge" and "response" Frames, the port adapter and host 
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1 


controllers maintain and use the lists 366, 368, and 369 of random numbers so that a host 




2 


controller can include an encrypted value in the Exchange lD of each storage access 




3 


request. 




4 
5 


Referring to FIGs. 35 and 36, there is shown a flow chart of a preferred procedure 




6 


for maintaining and using the lists 366, 368, and 369 of the random numbers. In a first 


u 


7 


step 421 of FIG. 35, a host controller sends a login request to a port adapter. In step 422, 




8 


the port adapter receives the login request from the host controller. In step 423, the port 


! 


9 


adapter authenticates the host, for example by using the "challenge-response" protocol of 


m 


10 


FIG. 33. Then in step 434, the port adapter sends an initial set of random numbers to the 


li 

o 


11 


host controller. The port adapter places these random numbers in its list 377. The list 


i I 

I'U 


12 


377 is maintained as a set of first-in, first-out (FIFO) queues including a respective queue 


1:8 
i;3 


13 


allocated for the random numbers sent to each host controller. In a similar fashion, the 


ru 


14 


host controller places the initial set of random numbers it receives in to its list 368 or 369 




15 


of random numbers. The host controller maintains its list as a set of FIFO queues 




16 


including a respective queue for each port adapter that it has logged in to. The size of 




17 


each FIFO queue, for example, is equal to the size of a queue that holds outstanding 




18 


requests from the adapter ports or host controller ports. This is done so that the port 




19 


adapter and host controller can encrypt the random numbers in their respective queues as 




20 


a background task relative to the outstanding requests. The host controller should 




21 

^ I 


tvnicallv nroduce the encrvntion value bv the time that the host controller receives a 




22 


request from the host to transmit a corresponding storage access request to the port 




23 


adapter, and the port adapter should typically produce an encryption value by the time 
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I that the port adapter receives the corresponding encryption value in a storage access 
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14 




15 




16 




17 




18 




19 




20 




21 




22 




23 



Every time the host needs to send an authenticated storage access request to the 
storage subsystem, as shown in step 428, the host controller takes the encrypted value of 
the next one of the random numbers in the FIFO queue for the port adapter, and uses the 
encrypted value as the Originator_ID in the Frame for the storage access request. In step 
429, the port adapter receives the Frame from the host controller. In step 430, the port 
adapter compares the encrypted value in the Frame with its encryption of the next random 
number in its FIFO queue for that particular host controller. If there is no match, then the 
storage subsystem rejects the message. This is an error condition that is reported back to 
the host controller. If there is a match, then the requested storage access can proceed, as 
shown in FIG. 36. In step 43 1 , the port adapter removes the last random number from the 
FIFO queue for the host controller, and generates a new random number used as the 
Responder_ID in its reply to the data access request from the host controller, and places 
this new random number at the end of its list, in its FIFO queue for the host controller. In 
step 432, the host controller receives the response from the port adapter, and places the 
new random number at the end of its list, in its FIFO queue for the port adapter. In step 
433, the port adapter continues encrypting the random nimibers in its list, in the order in 
which the random numbers were put into the list. Concurrently, the host controller 
continues encrypting the random numbers in its list. In this fashion, the host controller 
will have in advance a random number to use as the Originator_ID in a next message, and 
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1 depending on the priority of any other tasks, the host controller can encrypt the random 

2 number well before the encryption need be inserted into the next message. This ensures 

3 that the authentication method will not significantly impact the storage access time in the 

4 data processing system. 
5 

6 STORAGE NETWORK CONFIGURATIONS 

7 



8 FIG. 2 introduced a storage system configuration in which a respective Fibre 

is3 



9 Channel loop 41 , 42, 43, 44 was liked to a storage subsystem adapter port, and a number 

i.f| 10 of hosts 22, 23, 24, 25 were linked to each loop, and each host was linked through a 

jsss 

1 1 respective controller port to two loops. Such a fault-tolerant network configuration 

12 should support from two (4K I/O) to ten (32K I/O) small server hosts per storage 

i!fl 

i»3 13 subsystem adapter port. The storage subsystem 20, for example, can be fully loaded with 

ry 

14 sixteen adapter ports, which should support from 32 to 160 small server hosts. 
15 

16 In contrast to small server hosts, workstation hosts have a relatively light loading 

17 on the storage subsystem adapter ports. Also, fault tolerant links usually are needed 

18 between the workstations and the storage subsystem adapter ports. Therefore, as shown 

19 in FIG. 37, it is possible to link a large number of workstations 501, 502, 503, 504 to a 

20 cached storage subsystem 505 through a respective loop 506, 507 linked to each adapter 

21 port. For example, in the storage network configuration of FIG. 37, each of sixteen loops 

22 could be linked to about fifty workstations, to network a total of about eight-hundred 

23 workstations to one storage subsystem. 
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2 In a file-only environment (i.e., no video service), a single storage subsystem is 

3 capable of supporting considerably more than eight-hundred workstations. If it is desired 

4 to network more than eight-hundred workstations to one storage subsystem, then a 

5 maximum of about fifty workstations per loop becomes a constraint. The number of 

6 workstations can be increased while meeting this constraint by using switches to increase 

7 the number of loops over the number of adapter ports. As shown in FIG. 38, for example. 



Q 8 three sixteen- port switches 511,512,513 expand the number of ports connectable to 

a 

9 loops from the sixteen of the cached storage subsystem 514 to fifty-five. Each of the 



^ 1 0 three sixteen port switches 5 1 1 , 5 1 2, 5 1 3 has three of its ports connected directly to three 

1 1 respective storage subsystem adapter ports, and thirteen of its ports connected directly to 

1 2 loops, such as the loops 515,516, 517 shown directly connected to a port of a respective 

1 3 one of the switches 511,512,513. This would permit the fifty-five loops to support a 

14 total of thirty-three hundred workstations, although the loops would not have similar 

15 performance since thirty-nine of the loops would be linked directly to ports of the 

16 switches 511, 512, 513, and seven of the loops would be linked directly to storage 

1 7 subsystem adapter ports. 
18 

19 Another environment where multiple hosts are connected to a storage subsystem 

20 is known as the cluster of storage area networks (SAN) environment. In this case, 

21 multiple hosts are linked to more than one storage subsystem, and the storage subsystems 

22 are linked directly for the transfer of remote dual-copy data. This typically is not a high 

23 performance environment, but fault tolerance is a requirement. Therefore, there is a need 
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1 for more than one path from each host to each storage subsystem. Shown in FIG. 39, for 

2 example, is a two-loop storage network configuration including a first cached storage 

3 subsystem 531, a second cached storage subsystem 532. The two cached storage 

4 subsystems are coupled by a direct link 533 for transfer of remote dual-copy data. The 

5 network configuration includes sixteen hosts, only the first host 534 and the sixteenth 

6 host 535 being shown. A first loop 536 has links to one port on each of the cached 

7 storage subsystems 53 1 , 532 and links to one port on each of the sixteen hosts 534, 535. 

8 A second loop 537 also has links to another port on each of the cached storage 

\h 

jjg 9 subsystems 53 1 , 532 and to another port on each of the sixteen hosts 534, 535. 

in 

us, 

'I \l If the network configuration of FIG. 39 would not provide sufficient throughput 

C3 

12 performance, then additional loops are added, and the number of hosts directly linked to 

I y 

I'M 

Q 13 each loop is decreased. Shown in FIG. 40, for example, is a four-loop configuration, 

fu 

14 including as before two cached storage subsystems 541 , 542 having a direct link 543 

15 between them, and sixteen hosts, only the first host 544, the eighth host 545, the ninth 

16 host 546, and the sixteenth host 547 being shown. Two loops 548, 549 each have one 

17 direct link to one respective port on each of the cached storage subsystems 542, 543, and 

18 each of the first eight of the sixteen hosts, including, as shown, the first host 544 and the 

19 eighth host 545. None of the last eight of the sixteen hosts, including, as shown, the ninth 

20 host 546 and the sixteenth host, 547, have a port directly linked to the two loops 548, 

21 549. Two loops 550, 55 1 each have one direct link to one respective port on each of the 

22 cached storage subsystems 542, 543 and each of the last eight of the sixteen hosts, 

23 including, as shown, hosts 9 to 16. None of the first eight of the sixteen hosts, including, 
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1 as shown, the first host 544 and the eighth host 545 have a port directly Hnked to the 

2 loops 550, 551, 
3 

4 CONCLUSIONS 
5 

6 From the above, it is seen that a number of facilities have described to provide 

7 various features and advantages in a data processing system having a large number of 

8 hosts networked to one or more cached storage subsystems, some or all of which could be 

9 desired or required by any particular system users and managers. It should be apparent to 
Ln 10 a person of ordinary skill in the data processing art that the embodiments described above 

1 1 can be constructed to meet some or all of the following requirements: 



p 13 A. General Requirements 

ru 

14 

15 1 . Any number of storage subsystems should be simply plugged into the 

16 network and easily configured by a system administrator for host access to selected 

17 volumes. 
18 

19 2. Each entity in the data processing system (storage subsystem, data network, 

20 and host) should have separate and distinct management interfaces. The system 

21 administrator graphical user interface, or host graphical user interface, may provide a 

22 point of integration for the management interfaces of the entities. 
23 
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B. Data Network Requirements: 



3 1 . No path management intemal to the data network should be required. Path 

4 analysis is imdesirable for providing connectivity to a host while retaining required 

5 performance, in a system having a very large number of hosts, and current network 

6 technology such as Fibre Channel fabric switches having at most a few tens of ports. The 

7 intemal structure of the data network can be complex, and in this case it is relatively 
□ 8 difficult to analyze each path inside the data network , from the host to the storage 

subsystem, to determine the correct port and path for each host. Since the number of 

« 10 hosts is very large, it is also an almost impossible task to directly control the performance 

1 1 requirements for a single host. With a large number of hosts, the performance typically 



□ 

12 will not cluster, but will have random hot spots constantly changing over time. 

I'U 

□ 

I'll 

^^14 2. Invisible intemal path redundancy. There should always be at least two full 

15 redundant paths to reach the storage subsystem volumes from an external port of the data 

16 network. 
17 

18 3. The ports and protocol to/from the storage subsystem and data network 

19 should comply with current standards, including both fabric and loop. Given the cost of a 

20 switch port and the number of hosts involved, it is expected that the fabric will be made 

21 up of a combination of loops and fabric direct connect. Each port going to/from the 

22 storage subsystem should simultaneously support the different types of protocols. The 

23 external port type should be determined by the specific solution. 
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2 4. The storage subsystem should be allowed to register for notification of login 

3 state changes. The storage subsystem should keep current state information about the 

4 hosts and connections, especially to allow single use of a group of volumes. One 

5 limitation of the Fibre Channel protocol is that it does not support a logout. Along with 

6 that is the issue of detecting the loss of a host (this functionality is currently being 

7 developed in the FC standard). 



□ 8 

Q 

9 5. On-line "hot" management of data network configuration. 

13 11 6. Replacement of a host controller or storage subsystem director should not 

□ 

|[f^ 12 require any manual host-to-volume reconfiguration of the data network: 

i y 

14 7. The switches used in the data network should be interoperable with multiple 

15 fabric vendors. 
16 

17 C. Storage Subsystem Requirements: 

18 

19 1 . It is desirable to the storage subsystem to permit all volumes to be seen 

20 through a single storage subsystem port. This eliminates the difficuh management 

21 problem of configuring and maintaining the storage subsystem and the data network to 

22 guarantee a path from a given extemal port of the data network to a given volume. 
23 
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1 2. It is desirable to have a partitioning feature that will define the set of volumes 



2 that can be seen by a single host. This will restrict other hosts firom seeing volumes they 



3 are not configured to see. 



4 



5 3. A change of a port ID (source id or worldwide name) in the host should not 



6 affect the partitioning definition in requirement 2 above. 



7 



8 4. It is desirable to have a mapping feature that will allow the host to specify its 

i,f| 9 own LUN, which would be mapped to a logical LUN within the storage subsystem. 

m 

m 10 

m 

11 5. It is desirable to have the capability of selecting between "simultaneous multi 

Q 

I'X 12 host access" to a volume, and a "single host access" at a time. This is to control data 

•'I 3 

i^y 13 sharing capabilities. 

14 



15 6. It is desirable to limit host-to-volume access to read-only or read/write. 



16 



17 7. Each port should simultaneously support all SCSI address modes. 



18 



19 8. Each port should simultaneously support both Fibre Channel class 2 and class 



20 3. 



21 



22 9. Both loop and fabric Fibre Channel topologies should be supported. 



23 
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1 10. It should be possible to back up and restore the host-to-volume connectivity 

2 configuration information. 
3 

4 11. The storage subsystem should allow a volume to be used as boot disk for a 

5 host. 
6 

12. Replacement of a host controller or storage subsystem director should not 
require any manual host-to- volume reconfiguration of the storage subsystem. 

D. Host Requirements: 

1 . The host should be responsible for establishing a connection with the storage 
subsystem. 

15 2. The host should have the capability of specifying the target LUN information 

16 to be used in mapping LUNs to logical storage volumes. 
17 

18 3. The host should provide security for the configuration information (volume 

19 group and LUNs) that it uses to establish connectivity with the storage subsystem. 
20 

21 



□ 8 
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